Chapter 1 

Information Systems in Global Business Today 


Introduction 

Computers and Information technology (IT) are changing every aspect of 
our lives from entertainment to shopping, from thè work we do and where 
we do it, to how we communicate with friends and relatives. Many 
companies are remodeling their businesses and information systems with 
thè Internet in mind. IT is dramatically changing thè business landscape 
and significantly affecting strategie options and creating opportunities and 
issues that managers need to address in many aspeets of their business. 
Some of thè key impaets of technology and thè implications for 
management are: 

-» Business Strategy - collapsing time and distance, enabling electronic 
commerce 

-> Organization Culture - encouraging thè free flow of information 
-» Organization Structures - making networking and Virtual 
corporations a reality 

-> Management Processes - providing support for complex decision 
making processes 

-> The workplace - allowing work from home and on thè move 


The Role of Information Systems in Today's Business 

Information systems are essential for conducting day-to-day business as 
well as achieving strategie business objectives. Some firms, such as 
Amazon and ETrade, would be nonexistent without information 
systems. It is difficult to imagine some Service industries, such as finance, 
insurance, and reai estate industries, could not operate without 
information systems. The ability of a firm to use IT is becoming 
intertwined with thè firm's ability to implement corporate strategy. 
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As electronic business and electronic commerce grow in popularity and 
more firms digitize their operations, having useful information is 
becoming even more important to thè global business community. 
Business firms invest heavily in information systems to achieve six 
strategie business objectives: operational efficiency, new produets, Services 
& business models, customer and supplier intimacy, better decision 
making, competitive advantage, and survival. 

How Information Systems Are Transforming Business 

Wireless Communications, including computers and mobile hand-held 
computing devices, are keeping managers, employees, customers, 
suppliers, and business partners connected in every way possible. Email, 
online conferencing, thè Web, and thè Internet, are providing new and 
diverse lines of communication for all businesses, large and small. Through 
increased communication channels and decreased costs of thè 
Communications, customers are demanding more of businesses in terms of 
Service and product, at lower costs. E-commerce is changing thè way 
businesses must attract and respond to customers. 

What's New in Management Information Systems? 

The use of technology now extends far beyond thè simple desktop 
computer, especially in thè business world. There are three interrelated 
changes that are affecting companies worldwide: 

—» The emerging mobile digitai platform: More and more business 
computing is moving from PCs and desktop machines to mobile 
devices like IPhones, iPads, Smart Phones etc. Managers are 
increasingly using these devices to coordinate work, communicate 
with employees, and provide information for decision making. 

-» Growth of businesses use of big data: The use of Big Data — large 
pools of data that can be brought together and analyzed to discern 
patterns and make better decisions — will become thè basis of 
competition and growth for individuai firms, enhancing productivity 
and creating significant value for thè world economy by increasing thè 
quality of produets and Services. 
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All companies need to take Big Data and its potential to create value 
seriously if they want to compete. For example, some retailers 
embracing big data see thè potential to increase their operating 
margins. 

-> Growth of cloud computing: Cloud computing is a type of computing 
that relies on sharing computing resources rather than having locai 
servers or personal devices to handle applications. Main objective is to 
provide different Services — such as servers, Storage and 
applications — to an organization's computers and devices through 
thè Internet. The cloud has changed thè fundamental nature of 
computing and how business gets done. According to thè research 
done by Global Industry Analysts Ine, cloud computing carne as a 
boon for companies during tough economie and financial climate, 
given that thè technology can potentially slash IT costs by over 35% 

Globalization Challenges and Opportunities: A Flattened World 

Customers no longer need to rely on locai businesses for produets and 
Services. They can shop at any time and any day of a week for virtually 
anything and have it delivered to their door or desktop. Companies can 
operate at any time from any geographic location around thè world. Jobs 
can just as easily move across thè state or across thè ocean. The emergence 
of thè Internet into a full blown international Communications System has 
drastically reduced thè costs of operating and transacting business on a 
global scale. 

The move to a global economy has been facilitated by advanced 
telecommunications networks and particularly by thè Internet. At thè same 
time globalization adds challenges to businesses. In a global market cost of 
labor, varies widely among countries. In generai, labor costs are higher in 
developed countries than in developing countries. Also, developed 
countries usually pay high fringe benefits to employees, which make thè 
cost of doing business even higher. Therefore, many labor-intensive 
industries have moved their operations to countries with low labor costs. 
These moves are greatly facilitated with IT. 
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The Emerging Digital Firm 

A digitai firm is one in which nearly all of thè organization's significant 
business relationships with customers, suppliers, and employees are 
digitally enablcd, and key corporate assets are managed through digitai 
means. These digitai networks are supported by enterprise class 
technology platforms that have been leveraged within an organization to 
support criticai business functions and Services. Some examples of these 
technology platforms are Customer Relationship 

Management (CRM), Supply Chain Management (SCM), Enterprise 
Resource Planning (ERP), Knowledge Management (KMS), Enterprise 
Content Management (ECM), and Warehouse Management 
System (WMS). Making a firm digitai is not about just adding a computer 
System to thè mix. Throwing a computer System at outdated business 
processes is exactly thè wrong thing to do. A truly digitai firm has se ver al 
characteristics that distinguish it from most of thè firms claiming to be 
digitized: 

-» Significant business relationships with customers, suppliers, and 
employees are digitally enabled and mediated. 

—> Core business processes are accomplished through digitai networks 
spanning thè entire organization or linking multiple organizations. 

-> Key corporate assets - intellectual property, core competencies, and 
financial and human assets - are managed through digitai means. 

-> They sense and respond to their environments far more rapidly than 
traditional firms. 

—> They offer extraordinary opportunities for more flexible global 
organization and management, practicing time-shifting (business 
being conducted 24 hrs x7 day) and space-shifting (business being 
conducted globally or beyond traditional geographic boundaries). 

Strategie Business Objectives of Information Systems 

Strategie planning for an organization involves long-term policy decisions, 
like location of a new plant, a new product, diversification etc. Information 
technology has played an important part in thè U.S. and global economies. 
Companies rely on IT for fast Communications, data processing and market 
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intelligence. Specifically, business firms invest heavily in information to 
achieve six strategie business objectives: 

-> Operational excellence 

-» New produets, Services, and business models 
—» Customer and supplier intimacy 
—» Improved decision making 
—» Competitive advantage 
-» Survival 

Operational Excellence: This relates to achieving excellence in business in 
operations to achieve higher profitability. For example, a consumer goods 
manufacturer may decide upon using a wide distribution network to get 
maximum reach to thè customers and exposure. A manufacturing 
company may pursue a strategy of aggressive marketing and mass 
production. 

New Products, Services, and Business Models: This is part of growth 
strategy of an organization. With thè help of information technology, a 
company might even opt for an entirely new business model, which will 
allow it to establish, consolidate and maintain a leadership in thè existing 
market as well as provide a competitive edge in thè industry. As successful 
as Apple Ine., BestBuy, and Walmart were in their traditional brick-and- 
mortar existence, they have all introduced new produets, Services, and 
business models that have made them even more competitive and 
profitable. 
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Customer and Supplier Intimacy: When a business really knows its 
customers, and serves them well, thè way they want to be served, 
customers generally respond by returning and purchasing more. The result 
is increased revenues and prof its. Likewise with supplier s: The more a 
business engages its suppliers, thè better thè suppliers can provide vital 
inputs. The result is a lower cost of doing business. JC Penney is an 
excellent example of how thè use of information systems and technologies 
are extensively used to better serve suppliers and retail customers. Its 
information System digitally links thè supplier to each of its Stores 
worldwide. Suppliers are able to ensure thè continuous flow of products to 
thè Stores in order to satisfy customer demands. 

Improved Decision Making: A very important pre-requisite of strategie 
planning is to provide thè right information at thè right time to thè right 
persoti, for making an informed decision. Well planned Information 
Systems and technologies make it possible for thè decision makers to use 
real-time data from thè marketplace when making decisions. Previously, 
managers did not have access to accurate and current data and as such 
relied on forecasts, best guesses, and luck. The inability to make informed 
decisions resulted in increased costs and lost customers. 

Competitive Advantage: Doing things better than your competitore, 
charging less for superior products, and responding to customers and 
suppliers in reai time all add up to higher sales and higher profits that your 
competitors cannot match. Toyota and Walmart are prime examples of 
how companies use information systems and technologies to separate 
themselves from their competition. Toyota worked its way to top of its 
industry with thè help of its legendary information System. Walmart is thè 
most efficient retail store in thè industry based in large part on how well it 
uses its information resources. 

Survival: Firms also invest in information systems and technologies 
because they are necessities for doing business. Information systems are 
not a luxury. In doing so, they had a major competitive advantage over 
their competitors. In order to remain and sur vive in thè retail banking 
industry, other banks had no choice but to provide ATM Services to 
banking customers. 
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Data Vs Information 


Data is a collection of raw facts that may or may not be meaningful for 
managers. Input to any System may be treated as Data. It is very difficult to 
understand data and needs to be processed to understand. Data may not 
be in thè order. 


Information is thè outcome derived after processing thè data and is always 
meaningful. Output after processing thè System is Information. Processing 
is performed by performing arithmetic logicai calculations on data of 
simply by rearranging thè data. It is very easy to understand information. 
Information should be in thè order. 

For example, researchers who conduct market research survey might ask a 
member of thè public to complete questionnaires about a product or a 
Service. These completed questionnaires are data; they are processed and 
analyze in order to prepare a report on thè survey. This resulting report is 
information. 

Characteristics of Information 

Good information is that which is used and which creates value. 
Experience and research shows that good information has numerous 
qualities. 

Availability/accessibility: Information should be easy to obtain or 
access. Information kept in a book of some kind is only available and 
easy to access if you have thè book to hand. A good example of 
availability is a telephone directory, as every home has one for its locai 
area. 

Accuracy: Information needs to be accurate enough for thè use to 
which it is going to be put. To obtain information that is 100% 
accurate is usually unrealistic as it is likely to be too expensive to 
produce on time. Accuracy is important. As an example, if 
government statistics based on thè last census wrongly show an 
increase in births within an area, plans may be made to build schools 
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and construction companies may invest in new housing 
developments. In these cases any investment may not be recouped. 
Reliability or objectivity: Reliability deals with thè truth of 
information or thè objectivity with which it is presented. You can only 
really use information confidently if you are sure of its reliability and 
objectivity. Unless you know who thè author is, or a reputable 
university or government agency backs up thè research, then you 
cannot be sure that thè information is reliable. Some Internet websites 
are like vanity publishing, where anyone can write a book and pay 
certain (vanity) publishers to publish it. 

Relevance/appropriateness: Information should be relevant to thè 
purpose for which it is required. It must be suitable. What is relevant 
for one manager may not be relevant for another. The user will 
become frustrated if information contains data irrelevant to thè task in 
hand. For example, a market research company may give information 
on users' perceptions of thè quality of a product. This is not relevant 
for thè manager who wants to know opinions on relative prices of thè 
product and its rivals. The information gained would not be relevant 
to thè purpose. 

Completeness: Information should contain all thè details required by 
thè user. Otherwise, it may not be useful as thè basis for making a 
decision. For example, if an organization is supplied with information 
regarding thè costs of supplying a fleet of cars for thè sales force, and 
servicing and maintenance costs are not included, then a costing based 
on thè information supplied will be considerably underestimated. 
Level of detail/conciseness: Information should be in a form that is 
short enough to allow for its examination and use. There should be no 
extraneous information. For example, it is very common practice to 
summaries financial data and present this information, both in thè 
form of figures and by using a chart or graph. We would say that thè 
graph is more concise than thè tables of figures as there is little or no 
extraneous information in thè graph or chart. Clearly there is a trade- 
off between level of detail and conciseness. 

Presentation: The presentation of information is important to thè user. 
Information can be more easily assimilated if it is aesthetically 
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pleasing. For example, a marketing report that includes graphs of 
statistics will be more concise as well as more aesthetically pleasing to 
thè users within thè organization. 

Timing: Information must be on time for thè purpose for which it is 
required. Information received too late will be irrelevant. For example, 
if you receive a brochure from a theatre and notice there was a concert 
by your favorite band yesterday, then thè information is too late to be 
of use. 


Information Systems 

In a simplest sense, a System that provides information to people in an 
organization is called information System (IS). It can be defined as a 
collection of interrelated components working together to collect, process, 
store, and disseminate information to support decision making, 
coordination, control, analysis, and visualization in an organization. An 
information System is an organized combination of people (persware), 
hardware, software, communication networks, and data resources. 

Information systems in organizations capture and manage data to produce 
useful information that supports an organization and its employees, 
customers, suppliers and partners. So, many organizations consider 
information System to be thè essential one. Information systems produce 
information by using data about significant people, places, and things from 
within thè organization and/or from thè external environment to make 
decisions, control operations, analyze problems, and create new products 
or Services. As already mentioned, Information is thè data shaped into a 
meaningful form. Data, on thè other hand, are thè collection of raw facts 
representing events occurring in organizations or thè environment before 
they have been organized and arranged into a form that people can 
under stand and use. 
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The three basic activities to produce information in an information System 
are input, processing, and output. 

—» Input captures or collects raw data from within thè organization or 
from its external environment for processing. Normally input is 
hardware component of information systems. 

—> Processing converts raw data into thè meaningful information. 
Normally processing is done by software. Processing is done either 
by performing arithmetic or logicai calculations on thè data or by 
simply rearranging thè data. 

—> Output transfers information produced from processing data to thè 
people who will use it or to thè activities for which it will be used. 


Information systems also include two additional components: feedback and 
control. 
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• Feedback: It is data about thè performance of a System. It is thè idea 
of monitoring thè current System output and comparing it to thè 
System goal. For example, data about sales performance is feedback 
to a sales manager. 

• Control: On thè basis of feedback, thè control function makes 
necessary adjustments to a System's input and processing 
components to ensure that it produces proper output. For example, a 
sales manager exercises control when reassigning salespersons to 
new sales territories after evaluating feedback about their sales 
performance. 

The two types of information systems are formai and informai. Formai 
information systems are based on accepted and fixed definitions of data 
and procedures for collecting, storing, processing, disseminating, and 
using these data with predefined rules. Informai information systems, in 
contrast, relay on unstated rules. Formai information systems can be 
manual as well as computer based. Manual information systems use 
paper-and-pencil technology. In contrast, computer-based information 
systems (CBIS) relay on computer hardware and software for processing 
and disseminating information. 


Dimensions of Information Systems 

An information System represents a combination of management, 
organization, and technology elements. The management dimension of 
information systems involves leadership, strategy, and management 
behavior. The technology dimensions consist of computer hardware, 
software, data management technology, and 

networking/telecommunications technology (including thè Internet). The 
organization dimension of information systems involves thè organization's 
hierarchy, functional specialties, business processes, culture, and politicai 
interest groups. 
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Organizations 

Organizations are formai social units developed to thè attainment of 
specific goals. The key elements of an organization are its people, 
structure, operating procedures, politics, culture, and functional 
special ties. 

People: Organizations require many different kinds of skills and 
people like managers (such as senior, middle, and operational) who 
make decisions and plans to solve organizational problems, 
knowledge workers (such as engineers, architects, or scientists) who 
design products or Services and create new knowledge, data 
workers (such as secretaries, bookkeepers, or clerks) who process thè 
organizations paperwork, and production or Service workers (such 
as machinists, assemblers, or packers) who actually produce thè 
organizations products or Services. 

Structure: Organizations coordinate work through a structured 
hierarchy. The hierarchy arranges people in a pyramid structure of 
rising authority and responsibility. The upper levels of hierarchy 
consist of managerial, professional, and technical employees, 
whereas thè lower levels consist of operational personnel. 

Standard Operating Procedures (SOPs): Standard operating 
procedures (SOPs) are formai rules that have been developed over a 
long time for achieving organizational goals. Firm's business 
processes are based on its SOPs. 
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Organizational Politics: People in organization occupy different 
positions with different special ties, concerns and perspectives. As a 
result, they naturally have divergent and differing viewpoints about 
how Resources, Rewards, and Punishments should be distributed. 
This will result in politicai struggle for resources, competition and 
conflict within every organization. 

Organizational Culture: It is a set of fundamental assumptions 
about what products thè organization should produce, how it 
should produce them, where, and for whom. Organizational culture 
is a powerful restraint on change, especially technology change. Any 
technological change that threatens commonly held cultural 
assumptions usually meets a great deal of resistance. 

Business Functions: The major business functions, or specialized 
tasks performed by business organizations include sales and 
marketing (selling thè organization's products and Services), 
manufacturing and production (producing products and Services), 
finance (managing thè organization's financial assets like cash, 
stocks, etc.), accounting (maintaining thè organization's financial 
assets and accounting thè flow of funds), and human resources 
(attracting, developing, and maintaining thè organization's labor 
force; maintaining employee records). 

Management 

Management's job is to make decisions and formulate action plans to solve 
organizational problems. Managerial roles and decisions vary at different 
levels of thè organization. Senior managers occupy thè topmost hierarchy 
and are responsible for making long-range decisions. Middle managers 
occupy in thè middle of thè organizational hierarchy who are responsible 
for carrying out thè plans and goals of senior management. Operational 
managers monitor thè day-to-day activities of thè organization. 
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Top 

Management 



Fig: Different level of management 

Manager s play an important role in organizations. We can under stand 
managerial functions by examining classical and contemporary models of 
managerial behavior. 

• Classical Models of Management: The classical descriptions of 
management focuses on five classical functions of managers like 
planning, organizing, leading, and controlling. These terms actually 
describe formai managerial functions and are unsatisfactory as a 
description of what managers actually do in their jobs. For example, 
these terms do not address what managers actually do when they pian, 
decide things, and control thè work of others. 
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Above figure shows systems relationship among thè management 
functions. Planning includes setting objectives and determining in advance 
exactly how thè objectives will be met. Organizing means delegating and 
coordinating tasks and allocating resources to achieve objectives. 

Managers should also show leadership. He/she should influence 
employees to work towards achieving objectives. Controlling means 
managers should establish and implement mechanisms to ensure that 
objectives are achieved. 


• Behavioral Models of Management: These models describe 
management based on what managers actually do in their jobs. 
Managers' day-to-day behavior can be classified into 10 managerial 
roles. Managerial roles are expectations of activities that managers 
should perform in an organization. These roles fall into three categories: 
interpersonal, informational, and decisional. 
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Interpersonal Roles: Interpersonal management roles are grouped 
into three roles involving working with other people. Managers act 
as figureheads, leaders, and liaisons. 

Informational Roles: Informational management roles are divided 
into three different communication-based roles. Managers act as 
nerve centers, disseminators, and spokespersons. 

Decisional Roles: Decisional management roles are sorted into tour 
action-based roles for making and implementing decisions. 
Managers act as entrepreneurs, disturbance handlers, resource 
allocators, and negotiators. 



Information Technology 

Information technology is thè tool used by managers to deal with change. 
The technology dimension consists of computer hardware, software, data 
management technology, and networking/ telecommunications technology 
Computer Hardware: It is thè physical equipment used for input, 
processing, and output activities in an information System. It consists 
of processing unit; various input, output, and Storage devices; and 
physical media to link these devices together. 

Computer Software: It consists of detailed preprogrammed 
instructions that control and coordinate thè work of computer 
hardware components in an information System. 

Data Management Technology: In order to keep track of all of thè 
information stored, we need data management software that is 


16 




designed to organize thè information so that we can readily retrieve 
what we are looking for. 

^ Communication technology: It includes physical devices and 
software that link various computer hardware components that 
transfer data from one physical location to another. This technology 
helps to connect computers and communication equipments for 
sharing voice, data, images, sound, or video in networks. A network 
links two or more computers to share data and resources. 

All thè above technologies collectively form thè firm's information 
technology (IT) infrastructure. The IT infrastructure provides thè 
foundation or platform on which thè firm can build its specific information 
systems. So, each organization must carefully design and manage its IT 
infrastructure according to thè needs of thè information System. 

A Business Perspective on Information Systems 

From a business perspective, an information System provides a solution to 
a problem or challenge facing a firm and provides reai economie value to 
thè business. The decision to build or maintain an information System 
assumes that thè returns on this investment will be superior to other 
investments in buildings, machines, or other assets. These superior returns 
will be expressed as: 

• Increased productivity 

• Increased Revenues 

• Superior long-term strategie Positioning 

As already mentioned information systems collects data from environment 
and produces information. This information is useful for managers to 
perform managerial tasks such as planning, coordinating, controlling and 
decision making. On thè other hand information produced by these 
systems will be helpful to different business processes such as supply- 
chain management, customer relationship management, and knowledge 
management. Combination of these two perspectives ultimately helps in 
increasing firm's profitability and achieving strategie position. There are 
three ways an information System can add value to a business: 
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Help managers make better decisions 
Help make business processes more efficient 
Increase profitability 


Business Processes 
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Figure: The Business Information Value Chain 


Corriplementary Assets: Organizational Capital and thè Righi Business 

Model 

Assets that are required to derive value from primary investment are 
called complementary assets. For example, to get reai value from water 
resources requires investments in hydropower's, transmission lines, legai 
regulatory structures etc. Thus theses investments are complementary for 
getting reai values from investments in water resources. In thè same way 
investing just in IT may not give attractive returns to organizations. 

Studies show that there are considerable variations in returns from 
investments in information technology. Some organizations invest great 
deal of amount and also able to achieve great deal of values from this 
investment. On thè other hand some organizations invest great deal of 
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amount and are only able to achieve little value from this. Third variation 
is thè organizations that invest little in information technology but able to 
get great deal of returns. The fourth types of organizations are those that 
invest little in IT and also get little and also get little returns from it. This 
clearly indicates that investing in information technology does not 
guarantee good returns. The reason behind this is thè concept of 
complementary assets. 

Investments in information technology alone cannot make managers and 
organizations more effective. Thus, to get proper returns from investment 
in IT, organizations needs to invest in complementary assets also. Some 
organizations do not invest in discovering new business model or seeks to 
preserve existing business model even after investing in new technology. 
Due to this organization may be unable to take advantages of new 
technology and hence unable to get returns from investment in new 
technology. 

According to Kauffman et. al. complementary assets for investment in 
information technology are investment in new business models, new 
business process, management behavior, organizational culture, trainings 
etc. Organizations that do not invest in theses complementary assets can no 
get superior returns from investments in IT. 

Main complementary assets for investment in information technology can 
be categorized into following three classes: 

—> Organizational Assets: It includes investments in selecting 
appropriate business model, efficient business process, 
decentralization, distributed decision making rights, supportive 
organizational culture that values effectiveness and efficiency, 
Strong team for developing information systems. 

—» Managerial Assets: It includes senior management that supports 
investments in new technologies and change, incentives for new 
management innovations. Collaborative work environment. 
Training programs to enhance skills of using information systems in 
decision making etc. 
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—» Social Assets: It includes investments in establishing internet and 
telecom based infrastructure, conducting and launching IT-enriched 
educational programs, developing standards, laws and regulations 
etc. 


Contemporary Approaches to Information Systems 

When an information System is being developed, much importance should 
be given to thè structure of thè organization, culture of thè organization, 
etc. But along with these, especial attention should also be given to thè 
technical side of MIS. The various contemporary approaches to MIS 
development are: Technical Approach, Behavioral Approach, and Socio 
Technical Approach. 



The Technical Approach 

Technical approach says that all business information systems were 
combinations of computer Science, management Science, and operations 
research. Computer Science considers knowledge of subjects like Data 
structures and algorithms. Database Management Systems, Computer 
Networking, Theory of computing. Business data processing, 
Programming languages, System Analysis and design etc. was essential for 
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designing any business information System. Management Science 
considers theories like motivation and leadership theories and models had 
their impact on thè information System. Operation Research Techniques 
such as Linear Programming, Game theory, Transportation Problem, 
Fuzzy logie etc helped to enhance capabilities of information systems. 
Business Management adopted Operation Research Techniques such as 
CPM & PERT for project management in thè management process 
through information System. 


Behavioral Approach 

MIS also concerned with behavioral issues surrounding thè development, 
use, and impact of information systems, which are typically discussed in 
thè fields of sociologi/, economics, and psychology. Business Organizations are 
social economie groups wherein individuals work together with common 
motive. Every individuai possesses certain values, beliefs and assumptions 
and have specific mind set. Therefore every individuai have their influence 
on shaping up thè information System. This social aspect influenced 
development of every information System and people in thè world along 
with time e.g. e-Banking, e-Governance, e-Booking etc. Psychology refers 
to cognitive capability of human beings. The individuai as well as group 
psychology has its own influence on thè information System. People are 
stili scared of e-Transactions like e-Payments. Study of economics plays 
vital role in planning and while designing of any information System. We 
can find out thè ways for profit, growth and sales maximization as 
economics includes thè study of labor, land, and investments, of money, 
income, and production, and of taxes and government expenditures. 

Socio Technical Approach 

In thè socio technical view of systems, optimal organizational performance 
is achieved by jointly optimizing both thè social and technical systems 
used in production. Adopting a socio technical systems perspective helps 
to avoid a purely technological approach to information systems. 
Technology must be changed and designed, sometimes even "de- 
optimized," to fit organizational and individuai needs. Organizations and 
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individuate must ateo be changed through training, learning, and planned 
organizational change to allow technology to operate and prosper. 

MIS Hands on Project: Sales Trend Analysis and Forecasting 

The term trend implies a change over time. One type of forecasting is 
quantitative, and involves analyzing time-series data, and then predicting 
what thè future might be. For example, sales at an ice cream stand at thè 
town park in June of each of thè last five years has been good, but in July it 
was about 20% more than in June. If this year, thè stand took in $10,000 in 
June (a new record), how much would you predict it will take in July? 
Well, if we were correct in our assumption based on thè historical data, 
we'd estimate thè July figure would be 20% higher, or $12,000. 

Microsoft Excel offers some built-in tools for forecasting. One of these 
allows you to add a trendline to existing data points on a chart. This allows 
thè user to interpolate (i.e., to find a data point between existing points) or 
to extrapolate (i.e., to find a data point past either end of thè current data, 
either by forecasting foreword, or backcasting to an earlier period). Besides 
this, MS Excel provides built-in forecast function to predict future. Given 
thè following historical data of a company, MS Excel is used to identify 
trend and to make prediction of upcoming five years data. Based on this 
prediction management can make better decisions to develop plans for 
future. 

In thè above table value of last five rows are predicted by using MS. Excels 
FORECAST function. The FORECAST(x, known_y's,knozvn_x's) function 
returns thè predicted value of thè dependent variable (represented in thè 
data by known_y's) for thè specific value, x, of thè independent variable 
(represented in thè data by known_x's) by using a best fit (least squares) 
linear regression to predict y values from x values. The parameter x must 
have a numeric value, known_y's and known_x's must be arrays or celi 
ranges that contain equal numbers of numeric data values. If we plot graph 
for above data and add trend lines, it looks like below: 
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XYZ Companies Sales History, Trend Analysis and Prediction of Future Sales 


Year 

Items_Sold (in 
00000) 

Sales Amount (in 
millions) 

Net profit (in 
millions) 

2001 

184 

341 

12 

2002 

230 

523 

23 

2003 

279 

641 

37 

2004 

324 

660 

51 

2005 

332 

810 

73 

2006 

470 

915 

98 

2007 

523 

1045 

132 

2008 

602 

1040 

175 

2009 

621 

1205 

211 

2010 

758 

1295 

252 

2011 

824 

1372 

260 

2012 

896 

1506 

274 

2013 

974 

1637 

289 

2014 

1049 

1752 

305 

2015 

1138 

1894 

322 

2016 

1171 

1944 

367 

2017 

1250 

2043 

395 

2018 

1330 

2151 

422 

2019 

1409 

2264 

448 

2020 

1487 

2367 

472 
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To plot this graph we can flow following steps 
—» Select thè historical data 

—» Click insert menu and select proper scatter from it 
—» Select one of thè data point representing value of items sold 
—» Right click on it and select add trendline option in popup menu 
—» Select proper trendline options. In above graph forecast is set to 5 
forward periods 

—» Repeat previous step for all scatters in thè plot 
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Chapter 2 

Global E-Business and Collaboration 


Business Process 

Business processes refer to thè manner in which work is organized, 
coordinateci, and focused to produce a valuable product or Service. 
Business processes also refer to thè unique ways in which 
organizations coordinate work, information, and knowledge, and thè 
ways in which management chooses to coordinate work. Every 
business can be seen as a collection of business processes. Business 
processes are designed to add value for thè customer and should not 
include unnecessary activities. The outcome of a well designed 
business process is increased effectiveness (value for thè customer) 
and increased efficiency (less costs for thè company). There are three 
types of business processes: 

1. Management Processes: The processes that govern thè 
operation of a System. Typical management processes include 
corporate governance and strategie management 

2. Operational Processes: The processes that constitute thè core 
business and create thè primary value stream. For example, 
taking orders from customers, and opening an account in a 
bank branch. 

3. Supporting Processes: Theses processes support thè core 
processes. Examples include Health & Safety, accounting, 
recruitment, cali center, technical support. 


25 



The performance of a business firm depends on how well its business 
processes are designed and coordinated. Many business processes 
are tied to a specific functional area, such as sales and marketing, 
while others cross many different functional areas and require 
coordination across departments. 
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Table given below describes some typical business processes for each 
of thè functional areas of business. 

TABLE 2-1 EXAMPLES OF FUNCTIONAL BUSINESS PROCESSES 

Functional Area Business Process 

Manufacturing and production Assembling thè product 

Checking for quality 
Producing bills of materials 

Sales and marketing Identifying customers 

Making customers aware of thè product 
Selling thè product 

Fìnance and accounting Paying creditors 

Creating finandal statements 
Managing cash accounts 

Fluman resources Hirìng employees 

Evaluating employees' job performance 
Enrolling employees in benefits plans 
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Business Processes and Information Systems 

In order to operate, business must deal with many different pieces of 
information, they must organize work activities that use this 
information to operate efficiently and enhance thè overall 
performance of thè firm. Information systems make it possible for 
firms to manage all their information, make better decisions and 
improve thè execution of their business processes 

How Information Technology Improves Business Processes 

Information systems automate many steps in business processes that 
were formerly performed manually. But today, information 
technology actually can change thè flow of information even thè way 
thè business works and drive to a new business models. Information 
technology enhances business processes in two main ways: 

- Increasing efficiency of existing processes: Automating steps 
or processes that were manual 

- Enabling entirely new processes that are capable of 
transforming thè businesses: This is done by changing flow of 
information, or by replacing sequential steps with parallel 
steps, or by eliminating delays in decision making 


Types of Information Systems 

There are different kinds of systems according to different interests, 
specialists, and levels in an organization. Single System cannot 
provide all thè information needed by an organization. 
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Systems for Different Management Groups 

.1 The four mairi types of information systems that serve different 
management groups are: Transaction processing systems, Management 
information systems, Decision support systems, and Executive support 
systems. 

Transaction Processing Systems 

These are thè computerized systems that perform and records thè 
daily routine transactions necessary to conduct business. These 
systems serve thè operational level of thè organization. Some 
examples include sales order entry, hotel reservation systems, 
payroll, employee record keeping, and shipping. 

Transaction processing systems are centrai to a business. TPS failure 
for a few hours can cause a firm's demise and perhaps other firms 
linked to it. Managers need TPS to monitor thè status of internai 
operations and thè firm's relations with external environment. TPS 
are also major producers of information for thè other types of 
systems. 
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Online transaction processing systems (OLTPS) is an interactive 
data processing System that involves a direct connection between 
TPS programs and users. As soon as a single transaction is entered 
into a computer System, thè program interacts immediately with thè 
user for that transaction. It is often known as thè live System where 
there is no time lag between data creation and its processing. A good 
example of this System is online ticket reservation System. Most of 
thè OLTPS System requires thè support of networks that is spread 
over number of organizations or branches for performing it's 
operations. 

Unlike thè OLTPS, Batch processing systems accumulates thè 
transaction over a time, makes a queue of thè processes depending 
upon thè priorities and processes them periodically at thè later time. 
Some of thè TPS must follow batch processing due to business 
process of thè organization. For example, opening an account and 
getting ATM card is batch processing System. In this case all requests 
for ATM card collected during thè day time but these requests are 
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only processeci after some hour or even if after some days. This is thè 
reason that we need to wait some time for activating of our ATM 
cards. 


2.Management inf ormation systems 

These are thè information systems at thè management level of an 
organization and serve management-level functions like planning, 
controlling, and decision-making. These systems provide routine 
summary of reports and, in some cases, with online access to thè 
organization's current performance and historical recor ds to 
managers. Typically, these systems use internai data provided by thè 
transaction processing systems. Normally, these systems are used for 
structured decision-making. 

MIS usually serve managers interested in weekly, monthly, bi- 
monthly results —not day-to day activities. MIS generally provides 
answers to thè routine questions that have been specified in advance 
and have predefined procedures for answering them. 
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Fig: How MIS takes data from TPS 


3.Decision-support systems 

These systems also serve at thè management level of thè 
organization. These systems combine data and sophisticated 
analytical models or data analysis tools to support semi-structured 
and unstructured decision-making. These systems use internai 
information from TPS and MIS, and often information from external 
sources, such as current stock prices or product prices of competitors. 
DSS have more analytical power than other systems. DSS helps 
managers to make decision that are unique, fast changing and not 
easily specified in advance. DSS that supports and facilities thè 
decision making process by a group is called group decision support 
System (GDSS). Three quantitative models often used by DSS 
include: 

^ Sensitivity analysis is thè study of thè impact that changes in 
one (or more) parts of thè model have on other parts of thè 
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model. Users change thè value of one variable repeatedly and 
observe thè resulting changes in other variables. 

^ What-if analysis checks thè impact of a change in an 
assumption on thè proposed solution. For example, "What will 
happen to thè supply chain if a blizzard in Alberta reduces 
holding inventory from 30 percent to 10 percent?" Users repeat 
this analysis until they understand all thè effects of various 
situations. 

^ Goal-seeking analysis finds thè inputs necessary to achieve a 
goal such as a desired level of output. Instead of observing how 
changes in a variable affect other variables as in what-if 
analysis, goal-seeking analysis sets a target value (a goal) for a 
variable and then repeatedly changes other variables until thè 
target value is achieved. For example, "How many customers 
are required to purchase a new product to increase gross 
profits to $5 million?" 



Fig: DSS and its components 


4.Executive support systems 
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These systems serve thè strategie level of thè organization. These 
systems are designed to address unstructured decision making 
through advanced graphics and communication. These systems 
incorporate data about external events such as new tax laws or 
competitors, but they also draw summarized information from 
internai MIS and DSS. 


These systems are not designed to solve a specific problem but they 
provide a generalized computing and telecommunication capacity 
that can be applied to a changing array of problems. ESS helps senior 
executives to monitor firm performance, spot problems, identify 
opportunities, and forecast trends. These systems can filter out 
extraneous details for high level overviews, or they can drill down to 
provide senior managers to detailed transaction data if required. 
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ESS helps senior managers to analyze, compare, and highlight trends 
so that they may easily monitor organizational performance or 
identify strategie problem and opportunities. There is less use of 
analytical tools (as compared to DSS) in ESS. It is not necessary for 
users to be an expert in computer-based information System to be 
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able to use them. Therefore executive System must be easy to use and 
thè information must be easily manipulated. 


Systems for Linkina thè Enterprise 

No business can afford disjointed information systems that don't 
work together to produce a coherent picture of thè entire 
organization. All thè functions of a business must be integrated 
across traditional lines of demarcation. Islands of information can be 
devastating to a company if data cannot be shared throughout thè 
company. Even worse, thè islands of information can create problems 
if each faction of an enterprise has differing information that conflicts 
with other islands of information. These kinds of problems are what 
gave rise to enterprise applications that share thè same data 
anywhere it's needed in an organization. As networks of all kinds 
take hold, from thè Internet to intranets to extranets, Web-based 
enterprise applications are increasingly widespread. 

Enterprise applications are thè systems that can coordinate activities, 
decisions, and knowledge across many different functions, levels, 
and business units in a firm. Enterprise applications include: 

enterprise systems, supply chain management systems, customer 
relationship management systems, and knowledge management systems. 

> Enterprise systems 

These systems are also known as enterprise resource planning (ERP) 
systems and are used to bridge thè communication gap between all 
departments and all users of information within a company. If thè 
production department enters information about its processes, thè 
data are available to accounting, sales, and human resources. If sales 
and marketing is planning a new advertising campaign, anyone 
anywhere within thè organization will have access to that 
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information. Enterprise systems truly allow a company to use 
information as a vital resource and enhance thè bottom line. 

> Supply Chain Management: 

Supply chain management is thè dose linkage and coordination of 
activities in buying, making, and moving a product. It integrates 
supplier, manufacturer, distributor, and customer logistics processes 
to reduce time, redundant effort, and inventory cost. The supply 
chain is a network of organizations and business processes for 
procuring materials, transforming raw materials into intermediate 
and finished products, and distributing thè finished products to 
customers. It links suppliers, manufacturing plants, distribution 
centers, conveyances, retail outlets, people and information through 
processes such as procurement, inventory control, distribution, and 
delivery to supply goods and Services from source through 
consumption. Supply chain also includes reverse logistics in which 
returned items flow in thè reverse direction from buyer back to thè 
seller. 
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Information systems make supply chain management more efficient 
by helping companies coordinate, schedule, and control 
procurement, production, inventory management, and delivery of 
products and Services. Supply chain management systems can be 
built using intranets, extranets, or special supply chain management 
software. Information systems for supply chain management can 
help participants in thè supply chain in thè following activities: 

-> Decide when and what to produce, store, and move 
-> Rapidly communicate orders 
-> Track thè status of orders 

-> Check inventory availability and monitor inventory levels 
-> Reduce inventory, transportation, and warehousing costs 
-> Track shipments 

-> Pian production based on actual customer demand 
-> Rapidly communicate changes in product design 
Inaccurate or untimely information in thè supply chain causes 
inefficiencies such as parts shortages, underutilized plant capacity. 
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excessive finished goods inventory, or runaway transportation costs. 
One recurring problem in supply chain management is thè bullwhip 
effect, in which information about thè demand for a product gets 
distorted as it passes from one entity to next across thè supply chain. 

Supply chain management uses systems for supply chain planning 
(SCP) and supply chain execution (SCE). Supply chain planning 
systems enable thè firm to generate demand forecasts for a product 
and to develop sourcing and manufacturing plans for that product. 
Supply chain execution systems manage thè flow of products 
through distribution centers and warehouses to ensure that products 
are delivered to thè right locations in thè most efficient manner. 

> Customer Relationship Management systems 

Customer relationship management (CRM) is a term that refers to 
practices, strategies and technologies that companies use to manage 
and analyze customer interactions and data throughout thè customer 
lifecycle, with thè goal of improving business relationships with 
customers, assisting in customer retention and driving sales growth. 
An information System that maintains data about customers and all 
their interactions with thè organization is called Customer Relation 
Management (CRM) System. 

A major benefit of using CRM systems is to develop better relations 
with existing customers, which can lead to increased sales. By better 
anticipating thè needs of thè customers businesses can predict further 
purchases based on past historic trends. It also allows a cross-selling 
of other products by highlighting and suggesting alternatives and 
enhancements. By implementing a CRM System it can also lead to a 
better marketing of products by using a target market and a more 
personal approach. Ultimately this could lead to enhanced customer 
satisfaction and retention. Ensuring a good reputation in thè market 
allows for thè company to continuously grow. 


37 



> Knowledge Management Systems 

Knowledge management (KM) is thè process of capturing, 
developing, sharing, and effectively using organizational knowledge. 
Knowledge management efforts typically focus on organizational 
objectives such as improved performance, competitive advantage, 
innovation, thè sharing of lessons learned, integration 
and continuous improvement of thè organization. 

Knowledge Management System (KM System) refers to a 
(generally IT based) System for managing knowledge in 
organizations for supporting creation, capture, Storage and 
dissemination of information. Knowledge management systems (KMS) 
collect all relevant knowledge and experience in thè firm and make it 
available wherever and whenever it is needed to support business 
processes. The idea of a KM System is to enable employees to have 
ready access to thè organization's documented base of facts, sources 
of information, and Solutions. For example an engineer could know 
thè metallurgical composition of an alloy that reduces sound in gear 
systems. Sharing this information organization wide can lead to more 
effective engine design and it could also lead to ideas for new or 
improved equipment. 


Systems for Collaboration and Team Work Social Business 

Globalization now allows companies to work around thè clock, 
around thè world. It's not unusual for major corporations to shift 
work from one time zone to another, one country to another. 
Somehow, thè people in all thè geographically-separated locations 
have to be able to easily communicate and share information with 
each other. Working in teams is now becoming thè de facto practice 
in thè business world. 
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What Is Collaboration? 

Let's first determine exactly what thè term collaboration means 
working with others to achieve shared and explicit goals. All 
members that involve in collaborative work environment focus on a 
particular task or mission. Collaboration and teamwork has grown in 
popularity over thè last few years because new technology has made 
it much easier for people to communicate and share information, 
files, and documents. Collaboration and teamwork are centrai to thè 
success of many businesses. Here are six reasons why businesses 
promote collaboration and teamwork: 

• Changing nature of work — traditionally work was 
organized into silos. Now, most new jobs require interaction 
among employees, suppliers, and customers. 

• Growth of professional work —most professional jobs 
require dose coordination and sharing information and 
opinions with other professionals. 

• Changing organization of thè firm — traditionally 

organizations used a managerial hierarchy. Now, many firms 
have been "flattened" and expertise and decision-making 
powers are pushed down to groups and teams. 

• Changing scope of thè firm — globalization has created 
organizations that are disbursed to many geographically 
separated locations that require dose coordination. 

• Emphasis on innovation — innovation comes more from 
teams and groups than from a single individuai. 
Collaborative practices and technologies increase thè likely 
success of innovation. 

• Changing culture of work and business — diverse teams 
tend to produce better outputs and do it faster than 
individuals. 
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Collaboration among employees, suppliers, and customers is 
becoming an important tool in increasing a company's competitive 
advantage. Social networking platforms like Facebook, Twitter, and 
Pinterest help improve a company's social business to establish and 
improve interactions with groups inside and outside thè 
organization. Information sharing, innovation, and decision-making 
are enhanced through these technologies. 

Business Benefits of Collaboration 

Nearly all writers agree that collaboration is now more required 
within and between firms than was true in thè past (for reasons 
outlined above).Some of thè benefits of collaboration are discussed 
below: 

> Productivity: People working together can complete a complex 
task faster than thè same number of people working in 
isolation from one another; there will be fewer errors. 

> Quality: People who work collaboratively can communicate 
errors, and take corrective actions faster, when they work 
together than if they worked in isolation. 

> Innovation: People working collaboratively in groups can 
come up with more innovative ideas for products, Services, and 
administration than thè same number working in isolation 
from one another. 

> Customer Service: People working together in teams can solve 
customer complaints and issues faster and more effectively 
than if they were working in isolation from one another. 

> Financial performance (profitability, sales, and sales growth): 
As a result of all of thè above, collaborative firms have superior 
financial performance 
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Collaboration Capabllity 
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• Breadth of collaboration 
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Figure: Requirements for Collaboration 


Tools and Technologies for Collaboration and Social Business 

Many new systems for interacting with other employees, managers, 
vendors, and customers have been developed. You probably use 
some of them without realizing how essential they've become in 
creating an environment that supports a collaborative culture. 

• E-mail and instant messaging: billions of messages flow 
everyday between employees, managers, suppliers, and 
customers. 

• Social networking: more than just a way to socialize among 
friends, these tools give corporations another way for users to 
share ideas and collaborate with each other. According to its 
Forrester Research survey of 1,217 business decision makers 
worldwide late last year, 95% use social networks to some 
extent. 

• Wikis: Wikis are a type of Web site that makes it easy for users 
to contribute and edit text content and graphics without any 
knowledge of Web page development or programming 
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techniques. The most well-known wiki is Wikipedia. It relies on 
volunteers, makes no money, and accepts no advertising. Wikis 
are ideal tools for storing and sharing company knowledge and 
insights. 

• Virtual worlds: able to house online meetings, training 
sessions, and lounges, this type of tool is gaining popularity as 
a way to meet, interact, and exchange ideas. 

• Virtual Meeting Systems: With a Virtual meeting System you 
can hold strategy sessions once or twice a week instead. You 
would feel like all of your teammates are physically located in 
thè same place if you use telepresence technology. You can 
share ideas and documents in real-time. Best of all, you don't 
have all thè travel hassles and you can sleep in your own bed. 

• Google Apps and Google sites: One of thè most widely used 
"free" online Services for collaboration is Google Apps/Google 
Sites. Google Sites allows users to quickly create online, group- 
editable Web sites. Google Sites users can design and populate 
Web sites in minutes and, without any advanced technical 
skills, post a variety of files including calendars, text, 
spreadsheets, and videos for private, group, or public viewing 
and editing. Google Apps works with Google Sites and 
includes thè typical desktop productivity office software tools 
(word processing, spreadsheets, presentation, contact 
management, messaging, and mail). 

• Microsoft SharePoint: SharePoint is a browser-based 
collaboration and document management platform, combined 
with a powerful search engine that is installed on corporate 
servers. SharePoint has a Web-based interface and dose 
integration with everyday tools such as Microsoft Office 
desktop software products. SharePoint software makes it 
possible for employees to share their Office documents and 
collaborate on projects using Office documents as thè 
foundation. 
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• Lotus Notes: A third Internet-based collaboration environment 
your team could use is IBM's Lotus Notes. It provides all thè 
basic collaboration tools as Google Apps/Google Sites and 
SharePoint do but with a few added features. 

The Information Systems Function in Business 

Many people focus on thè job losses caused by technological 
advances and changes. On thè other hand, many new jobs have been 
created because of technology. Information systems departments, 
previously a tiny group of people usually assigned to thè financial 
group, have moved into thè mainstream of most companies. 

The Information Systems Department 

Programmers have taken on more important positions within 
organizations. They must understand not only thè technical side of 
computing, but they must also know business processes so they can 
adapt thè technology to thè needs of their company. Systems 
analysts serve as thè bridge between thè techies and thè nontechies. 
Heading this group of people are thè information systems 
managers. Their importance to businesses has grown as thè 
emphasis on technology's role within organizations has grown. 

Just as most organizations have a Chief Financial Officer, thè position 
of Chief Information Officer has been created to handle thè myriad 
of problems and opportunities businesses face in today's 
technologically driven environment. Very large corporations appoint 
a Chief Security Officer who's responsible for enforcing thè firm's 
information security policy and training users and information 
systems technologists about security. The CSO keeps other 
executives and managers aware of security threats and maintains 
security tools and policies. 
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Chief Privacy Officer protects an organization's data from misuse 
and abuse and makes sure thè company complies with data privacy 
laws. Another new position that of Chief Knowledge Officer, has 
been created in larger corporations to deal with effectively using 
knowledge management systems. 

Organizinz thè Information Systems Function 

Deciding how to organize thè Information Systems function within a 
business is not as easy as deciding how to organize other functional 
areas. After all, sales and marketing has a much different mission 
than production and manufacturing. Information Systems on thè 
other hand has similar tasks regardless of thè functional area it is 
supporting. Sales and marketing needs access to data thè same as 
production and manufacturing. 

Larger companies and organizations develop an IT governance that 
helps decide thè best way to organize thè IT department for thè 
benefit of all. Some of thè issues to be decided upon are: 

• Strategy and policies for using IT 

• Accountability toward thè organization's strategies and 
objectives 

• How much centralization will take place within thè IT function 

• Does thè organization receive a positive return on its IT 
investments? 


Systems For Functional Areas 

The typical information systems that support each of major business 
functions are: sales and marketing systems, manufacturing and 
production systems, finance and accounting systems, and human 
resources systems. These systems serve at every organizational level. 

Sales and Marketing Systems 
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Sales and marketing function is responsible for selling thè 
organization's products or Services. Marketing is concerned with 
identifying thè customers for thè firm's products or Services, 
determining what they need or want, planning and developing 
products and Services to meet their needs, and advertising and 
promoting these products and Services. Sales is concerned with 
contacting customers, selling thè products and Services, taking 
orders, and following up on sales. Sales and marketing information 
systems support sales and marketing activities. 

These information systems are arranged by organizational level. At 
strategie level, these systems monitor trends affecting new products 
and sales opportunities, support planning for new products and 
Services, and monitor thè performance of competitors. At thè 
management level, these systems support market research, 
advertising and promotional campaigns, and pricing decisions; they 
also analyze sales performance and thè performance of thè sales staff. 
At thè knowledge level, these systems support market analysis 
activities. At thè operational level, these systems assist in locating 
and contacting prospective customers, tracking sales, processing 
orders, and providing customer Service support. 

Exomples of Sales and Marketing Information Systems 


System 

Description 

Organizational Level 

Order processing 

Enter, process, and track orders 

Operational 

Pricing analysis 

Determine prices for products and Services 

Management 

Sales trend forecasting 

Prepare 5-year sales forecasts 

Strategie 


Manufacturing and Production Systems: 

The manufacturing and production function is responsible for 
producing firm's goods and Services. Manufacturing and production 
is concerned with thè planning, development, and maintenance of 
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production facilities; thè establishment of production goals; thè 
acquisition, Storage, and availability of production materials; and 
scheduling of equipment, facilities, materials, and labor required to 
fashion finished products. Manufacturing and production 
information systems support manufacturing and production 
activities. 


Examples of Manufacturing and Production Information Sysfems 


System 

Description 

Organizational Level 

Machine control 

Control thè adions of machines and equipment 

Operational 

Production planning 

Decide when and how many products should be produced 

Management 

Facilities location 

Decide where to locate new production facilities 

Strategie 



These information systems are also arranged by organizational level. 
At thè strategie level, these systems deal with thè firm's long term 
manufacturing goals, such as where to locate new plants or whether 
to invest in new manufacturing technology. At thè management 
level, these systems analyze and monitor manufacturing and 
production costs and resources. At knowledge level, these systems 
deal with creating and distributing design knowledge or expertise to 
drive thè production process. At thè operational level, these systems 
deal with thè status of production tasks. 

Finance and Accounting Systems 

The financial function is responsible for managing thè firm's 
financial assets, such as cash, stocks, bonds, and other investments in 
order to maximize thè return on these financial assets. It also 
manages thè capitalization of thè firm (finding new financial assets in 
stocks, bonds, or other forms of debt). The finance function must also 
obtain a considerable amount of information from sources external to 
thè firm in order to determine whether thè firm is getting thè best 
return on investments. 
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The account function is responsible for maintaining and managing 
thè firm's financial records (such as receipts, disbursement, 
depreciation, payroll) to account for thè flow of funds in thè firm. 
Finance and accounting information systems support finance and 
accounting activities. 

Examples of Finance and Accounting Information Systems 

System _ 

Accounts receivable 
Budgeting 
Profit planning 


These information systems are also arranged by organizational level. 
At thè strategie level, these systems establish long-term investment 
goals for thè firm and prò vide long-range forecasts of thè firm's 
financial performance. At thè management level, these systems help 
managers oversee and control thè firm's financial resources. At thè 
knowledge level, these systems support finance and accounting by 
providing analytical tools and workstations for designing thè right 
mix of investments to maximize returns for thè firm. At thè 
operational level, these systems track thè flow of funds in thè firm 
through transactions. 

Human Resources Systems: 

The human resource function is responsible for attracting, 
developing, and maintaining thè firm's work force. This function 
support activities such as identifying potential employees, 
maintaining complete record on existing employees, and creating 
programs to develop employees' talent and skills. Human resources 
information systems support these activities. 


Description Organizational Level 

Tracks money owed thè firm Operational 

Prepares short-term budgets Management 

Plans long-term profits Strategie 
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Emples ol Human Resources Information Systems 


System 

Description 

Organizational Level 

Training and development 

Tracks employee training, skills, and performance appraisals 

Operational 

Compensation analysis 

Monta thè range and distnbution of employee wages, salanes, and benefits 

Management 

Human resources planning 

Plans thè long-term labor force needs of thè organization 

Strategie 


These information systems are also arranged by organizational level. 
At thè strategie level, these systems identify thè manpower 
requirements (skills, educational level, types of position, number of 
positions, and cost) for meeting thè firm's long-term business plans. 
At thè management level, these systems help managers monitor and 
analyze thè recruitment, allocation, and compensation of employees. 
At thè knowledge level, these systems support analysis activities 
related to job design, training, and thè modeling of employee career 
paths and reporting relationships. At thè operational level, these 
systems track thè recruitment and placement of thè firm's employees. 
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Chapter 3 

Information Systems, Organizations, and Strategy 


Organizations and Information Systems 

Relationship between information systems and organization is like chicken-and- 
egg theory. We need to design information systems that serve thè existing 
organization. At thè same time we must be ready and willing to restructure thè 
organization to take advantage of thè improvements an information System can 
offer. So which one takes precedent — thè organization or thè information 
System? Actually neither one. The goal is to adapt one to thè other. 


What Is a ri Organization? 

An organization is very similar to thè information System. Refer to thè figures given 
below: 

FIGURE 1-4 FUNCTIONS OF AN INFORMATION SYSTEM 
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Figure: The Technical Microeconomic Definition of thè Organization 
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These two figures have many things in common. Both information systems and 
organizations require inputs and some sort of processing, both have outputs, and 
both depend on feedback for successful completion of thè loop. Information 
systems use data as their main ingredient and organizations rely on people. 
However, thè similarities are remarkable. Both are a structured method of 
turning raw products (data/ people) into useful entities (information/ producers). 


Features of Organizations 

The class you're enrolled in is an organization of sorts, isn't it? Think about it — 
how many of thè following characteristics fit your class? How many fit any 
organization you're in? 

- Clear division of labor 

- Hierarchy of authority 

- Abstract rules and procedures 

- Impartial judgments 

- Technical qualifications for positions 

- Maximum organizational efficiency 

These characteristics describe organizations that are called bureaucracies. 


Organizational Structure 

Table given below shows some common organizational structures. 


TABLE 3-2 ORGANIZATIONAL STRUCTURES 


ORGANIZATIONAL TYPE 
Entrepreneurial structure 


Machine bureaucracy 


Divisionai ized bureaucracy 


Professional bureaucracy 


Adhocracy 


DESCRIPTION 

Young, small firm in a fast-changing environment. It has a 
simple structure and is managed by an entrepreneur serving 
as its single chtef executive officer. 

Large bureaucracy existìng in a slowly changing environment. 
producing standard products. It is dominated by a centralized 
management team and centralized deciston making. 

Combrnation of multiple machine bureaucracies, each 
producing a different product or servke, all topped by one 
centrai headquarters. 

Knowledge-based organization where goods and Services 
depend on thè expertise and knowieòge of professionals. 
Dominated by department heads with weak centralized 
authonty. 

Task force organization that must respond to rapidly changing 
environments. Consists of large groups of specialists organized 
into short-lived multìdisaplinary teams and has weak centrai 
management 


EXAMPLES 

Small start-up business 

Midsize manufacturing firm 

Fortune 500 hrms, sudi as General 
Motors 

Law firm s, school systems, hospitals 


Consulting fìrms, sudi as thè Rand 
Corporation 
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How Information Systems Impact Organizations and Business 
Firms 

Two major types of theories about how information systems affect organizations 
are: economie theories and behavioral theories. 


Economie Impacts 

It's sometimes cheaper to hire a computer than to hire a person. To better 
illustrate this concept, let's take a look at how a company can find it cheaper to 
use an information System to develop and disseminate a Human Resources 
policy for employee dress codes. The HR assistant may write thè first draft of thè 
policy and give it to thè HR director on paper. The director will review it and 
make changes. The assistant then must incorporate thè changes and reprint thè 
document. If there is an information System, thè assistant can submit thè draft to 
thè director electronically and thè director can make changes to thè electronic 
version of thè file and return it to thè assistant. This will reduce time and cost of 
thè task. 

Of course others in thè organization must review thè new dress code policy. The 
proposed policy can be printed in 15 copies, a person can manually send thè 
copies out, track who they went to and when, and then track all thè changes 
made to thè proposal. If we use information systems, thè proposed policy can be 
sent electronically to reviewers who will electronically collaborate on necessary 
changes. Each of thè reviewers can see what thè others think and thè changes 
they would like to make. This is another point where we can huge amount of 
human effort and some amount of time and money also. One manager can 
oversee ten employees (agents) rather than four employees because information 
is cheaper and easier to disseminate. 


Organizational and Behavioral Impacts 
IT Flattens Organizations 

Rather than five layers of management in an organization, information 
technology allows companies to flatten thè layers to three, maybe even two. 
Here's how: 
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• IT pushes decision-making rights lower in thè organization because 
lower-level employees receive thè information they need to make 
decisions without supervision. 

• Managers now receive so much more accurate information on time, they 
become much faster at making decisions, so fewer managers are required. 

• Management costs decline as a percentage of revenues, and thè hierarchy 
becomes much more efficient. 

The Internet and Organizations 

The example used earlier of posting personnel policies to thè company intranet is 
just one small example of how businesses are using network technologies to 
reduce costs and enhance their business processes. Business-to-business 
commerce is growing at a tremendous pace because of thè cost savings thè 
Internet allows. The Internet provides cin open platform technology that allows 
transaction processing between businesses at much cheaper costs and provides an easy- 
to-use interface. The innovative ways organizations are using thè Internet, 
intranets, and extranets to improve their business processes and lower costs is 
simply fascinating. 


Using Information Systems to Achieve Competitive Advantage 

Porter’s Competitive Forces Model 

Porter's competitive forces model tells that much of thè success or failure of a 
business depends on its ability to respond to its external environment. Figure 
below shows five external forces that every business must contend with at one 
time or another. 


New market entrants 


Substitute products 


The Firm Competitors 





Suppliers 



Customers 
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Figure: Porter’s Competitive Forces Model 

It's important to understand from this model that a firm's success is not 
predicated on how well it does internally. It must also pay attention to: 

• Traditional competitors: Always trying to steal your customers with new 
products and Services. 

• New market entrants: Not constrained by traditional ways of producing 
goods and Services, they can easily jump into our markets and steal 
customers away with cheaper or better products and Services. 

• Substitute products and Services: Customers may be willing to try 
substitute products and Services if they decide our price is too high or thè 
quality of our products and Services is too low. 

• Customers: They are now armed with new information resources that 
make it easier for them to jump to our competitors, new market entrants, 
or substitute products. 

• Suppliers: The number of suppliers used may determine how easy or 
difficult our business will ha ve in controlling our supply chain. Too few 
suppliers and you lose a lot of control. 

Information System Strategies for Dealing with Competitive Forces 

Many companies have found that effective and efficient information systems 
allow them to deal with external forces in one of four ways: low-cost leadership, 
product differentiation, focus on market niche, and strengthen customer and 
supplier intimacy. 

Low-Cost Leadership 

By using information systems to lower our operational costs we can lower our 
prices. That will make it difficult for traditional competitors and new market 
entrants to match our prices. 

Product Differentiation 

A very effective use of strategie information systems is to create products or 
Services that are so different that they create barriers for thè competition. Product 
differentiation is at thè heart of Apple Computer's success. People like to feel 
that they are unique individuate with their own needs and desires. One of thè 
best strategies for dealing with competitors is to offer customers exactly what 
they want, when they want it, and how they want it. The Internet provides a new 
outlet for mass customization by allowing customers to order one-of-a-kind 
products. 
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Focus on Market Niche 

If an organization is in a tough competitive market, it can choose to focus on a 
very narrow segment of thè market rather than a broad generai audience. A firm 
can gather very specific information about its customers using data mining 
techniques. Then it creates a focused differentiation business strategy to market 
directly to those consumers. Apple Computer uses focused differentiation to 
help sell its computers to a narrow target market of graphic designers and 
educators rather than thè generai population of computer users. 

Strengthen Customer and Supplier Intimacy 

Supply chain management (SCM) systems increase supplier intimacy while 
customer relationship management systems increase customer intimacy. SCM 
systems create immense switching costs between a company and its suppliers 
because of thè investment of hardware and software necessary to make thè 
System successful. Customer relationship management systems allow companies 
to learn details about customers that give them thè competitive advantage over 
traditional competitors and new market entrants. 

The Internet’s Impact on Competitive Advantage 

The Internet allows traditional competitors to introduce new products and 
Services and attract customers. It provides a low cost avenue for new market 
entrants. Consumers can easily and quickly find substitute products and Services 
through thè Internet. Customers can use information provided on thè Internet to 
create new competition between companies while suppliers can increase their 
market power. Table below summarizes thè impact thè Internet is having on 
many industries. 
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TABLE 3-5 IMPACT OFTHE INTERNET ON COMPETITIVE FORCES ANO INDUSTRY STRUCTURE 


COMPETITIVE FORCE 


OFTHE INTERNET 


Substmite products or Services Enables new substitutes to emerge with new approaches to meeting needs and performing functìons 

Customers' bargaining power Availability of global price and product informabon shifts bargaining power to customers 

Suppliers' bargaining power Procurement over thè Internet tends to raise bargaining power over suppliers; suppliers can ako benefit 

from reduced barriers to entry and from thè elimination of distnbutors and other intermedranes standing 
between them and their users 


Threat of new entrants 


Posiboning and rivai ry among 
existing competitors 


The Internet reduces barriers to entry, such as thè need for a sales force access to channels, and physical 
assets; it provides a technology for driving business processes that makes other thmgs easier to do 

Widens thè geographic market, increasing thè number of competitors, and reduong differences among 
competitors; makes it more difficult to sustain operational advantages; puts pressure to compete on price 


Because of thè tremendous growth of thè Internet and its influence on all five 
elements of Porter's model, businesses must continually monitor thè 
organizational environment, especially thè external environment for potential 
challenges and opportunities. Those businesses that adapt their business model 
stand a chance of success. Those businesses who ignore thè environmental 
changes and remain stagnant, risk everything they have. 


The Business Value Chain Model 

A value chain is a set of activities that a firm operating in a specific industry 
performs in order to deliver a valuable product or Service for thè market. Porter 
described a chain of activities common to all businesses, and he divided them 
into primary and support activities, as shown below. 
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Support 

Activities 


Administration and Management: 

Electronic scheduling and messaging Systems 

Human Resources: 

Workforce planning systems 

Technology: 

Computer-aided design systems 


Procurement: 
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Figure The Value Chain Model 


♦> Primary Activities 

Primary activities relate directly to thè physical creation, sale, maintenance and 
support of a product or Service. They consist of thè following: 

• Inbound logistics - These are all thè processes related to receiving, 
storing, and distributing inputs internally. Your supplier relationships are 
a key factor in creating value here. 

• Operations - These are thè transformation activities that change inputs 
into outputs that are sold to customers. Here, your operational systems 
create value. 

• Outbound logistics - These activities deliver your product or Service to 
your customer. These are things like collection, Storage, and distribution 
systems, and they may be internai or external to your organization. 

• Marketing and sales - These are thè processes you use to persuade clients 
to purchase from you instead of your competitors. The benefits you offer, 
and how well you communicate them, are sources of value here. 
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• Service - These are thè activities related to maintaining thè value of your 
product or Service to your customers, once it's been purchased. 

❖ Support Activities 

These activities support thè primary functions above. In our diagram, thè dotted 
lines show that each support, or secondary, activity can play a role in each 
primary activity. For example, procurement supports operations with certain 
activities, but it also supports marketing and sales with other activities. 

• Procurement (purchasing) - This is what thè organization does to get thè 
resources it needs to operate. This includes finding vendors and 
negotiating best prices. 

• Human resource management - This is how well a company recruits, 
hires, trains, motivates, rewards, and retains its workers. People are a 
significant source of value, so businesses can create a clear advantage with 
good HR practices. 

• Technological development - These activities relate to managing and 
processing information, as well as protecting a company's knowledge 
base. Minimizing information technology costs, staying current with 
technological advances, and maintaining technical excellence are sources 
of value creation. 

• Infrastructure - These are a company's support systems, and thè functions 
that allow it to maintain daily operations. Accounting, legai, 
administrative, and generai management are examples of necessary 
infrastructure that businesses can use to their advantage. 


By effectively using an information System in a strategie role at any, or preferably 
all, levels of thè organization, a digitai firm can provide more value in their 
produets than thè competition. If they can't provide more value, then thè 
strategie information System should help them provide thè same value but at a 
lower price. 


Using Systems for Competitive Advantage: Management Issues 

Strategie information systems often change thè organization as well as its 
produets, Services, and operating procedures, driving thè organization into new 
behavioral patterns. Successfully using information systems to achieve a 


57 



competitive advantage is challenging and requires precise coordination of 
technology, organizations, and management. 


Sustaining Competitive Advantage 

Using information systems to beat thè competition and increase thè value of a 
product is not easy. Because competitors can quickly copy strategie systems, 
competitive advantage is not always sustainable. Sustaining a competitive 
advantage constantly requires changing processes and methods of conducting 
business. Managers simply cannot rest on their success with today's fast paced, 
fast changing technological advances. Technology changes much faster than 
organizations can adapt. As soon as employees and managers become 
comfortable with a particular System, it's almost time to make some more 
changes. 


Aligning IT with Business Objectives 

It's such a basic idea —an organization should align its information technology 
with its business objectives. It's an easy thing to ha ve happen when thè techies 
and thè non-techies fail to work together to pian, implement, and maintain 
information systems that support their company's business objectives and 
competitive strategy. 

Employees and managers in all thè functional areas must be active players in thè 
IT game. They can't sit on thè sidelines and let someone else decide what kind of 
information System thè company will have. They can't claim ignorance and say 
they don't know that much about computers. 


Managing Strategie Transitions 

A vital attribute of any manager's success is thè ability to adapt to change. The 
pace of technological change is at its highest level ever. With each advance, thè 
organization must use strategie transitions, to take its advantage. Making 
changes in thè information systems should trigger a review of associated 
processes to make sure they are in sync. 
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Chapter 5 

Information Technology Infrastructure 
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OverView 

Information technology is thè application of computers and telecommunication 
equipments to store, retrieve, transmit and manipulate data, often in thè context 
of a business or other enterprise. The term is commonly used as a synonym for 
computers and computer networks, but it also encompasses other information 
distribution technologies such as television and telephones. Humans have been 
storing, retrieving, manipulating and communicating information since 
thè Sumerians in Mesopotamia developed writing in about 3000 BC, but thè 
term information technology in its modern sense first appeared in a 1958 article 
published in thè Harvard Business Review; authors Harold J. Leavitt and 
Thomas L. 

As information becomes a valuable resource of a digitai firm, thè infrastructure 
used to care for it is also considered as valuable resource of an organization. This 
Chapter will examine all of thè components that comprise todays and 
tomorrow's IT infrastructure and how it can be managed in best way. 

What is IT Infrastructure? 

IT infrastructure refers to thè composite hardware, software, network resources 
and Services required for thè existence, operation and management of an 
enterprise IT environment. It allows an organization to deliver IT Solutions and 
Services to its employees, partners and customers and is usually internai to an 
organization and deployed within owned facilities. Typically, a standard IT 
infrastructure consists of thè following components: 

• Hardware: Servers, computers, data centers, switches, hubs and routers, 
etc. 

• Software: Enterprise resource planning (ERP), customer relationship 
management (CRM), productivity applications and more. 

• Network: Network enablement, Internet connectivity, firewall and 
security. 

• Persware: Human users, such as network administrators, developers, 
designers and generic end users with access to any IT appliance or Service 
are also part of an IT infrastructure, specifically with thè advent of user- 
centric IT Service development. 

To round out thè list of IT infrastructure components we need to add thè 
following Services to computing hardware and software: 
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• Computing Services: Provide platforms that ensure a coherent digitai 
environment 

• Telecommunications Services: Determine appropriate data, voice, and 
video that connect employees, customers, and suppliers 

• Data management Services: Not just store, but manage massive amounts 
of corporate data and make it available for users to analyze 

• Application software Services: Enterprise resource planning, customer 
relationship management, supply chain management and knowledge 
management systems 

• Physical facilities management Services: Physical installation of 
computing, telecommunications, and data management Services 

• IT management Services: Pian and develop infrastructures, coordinate IT 
Services among business units, account for IT expenditure, and provide 
project management Services 

• IT standards Services: Develop policies that ensure interoperability of all 
IT infrastructure components 

• IT education Services: Train employees to properly use IT investments and 
educate managers about planning for and managing thè investments 

• IT research and development Services: Research future IT projects and 
investments 



Customer 


Supplier 

Business 

Partners 


Fig: Connection between Firm, IT Infrastructure and Business Capabilities 
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Evolution of IT Infrastructure 


Reviewing thè evolution of corporate IT infrastructure offers some insight into 
where we may be headed. Five stages in thè evolution of IT infrastructure can be 
identified. Which are described below: 

General-purpose mainframe and minicomputer era (1959 to present) 

The introduction and continued use of mainframes. Mainframes were thè first 
powerful computers that could provide time sharing, multi tasking, and Virtual 
memory, and became powerful enough to support thousands of remote 
terminals. The mainframe era was a period of highly centralized computing 
controlled by programmers and System operators. In this era dumb terminals 
were normally connected with centralized computing facilities. Minicomputers 
are, powerful yet less expensive computers, began to change this pattern, 
allowing decentralized computing customizable to individuai departments or 
business units. It's interesting to note that IBM began this era and remains thè 
sole supplier of mainframe computing. Although thè experts and pundits 
predicted thè death of mainframes in thè mid-1980s, they have evolved and 
remain a strong, viable component in many IT infrastructures because of their 
ability to store and process huge amounts of data and transmissions 



□. 

i 1 1 I 

Dumb Terminal N 


Centralized 

Computing 


Personal computer era (1981 to present) 

The appearance of thè IBM PC in 1981 is usually considered thè beginning of thè 
PC era. Advances developed for personal computers in thè home have given rise 
to much of thè advances in corporate computing in thè last 25 years. As thè home 
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user became more comfortable with using computers, and more applications 
were developed for personal computers, employees demanded increased use of 
computers in thè workplace. While thè Wintel PC standard has dominated this 
era, open-source software is starting to put a big dent into that stronghold. 



Client/server era (1983 to present) 

In client/ server computing, desktop or laptop computers called clients are 
networked to server computers that provide thè clients with Services and 
capabilities. Computer processing work is split between these two types of 
machines. The client is thè user point of entry, whereas thè server typically 
processes and Stores shared data, serves up Web pages, or manages network 
activities. The term server refers to both thè software application and thè 
physical computer on which thè network software runs. The server could be a 
mainframe, but today server computers typically are more powerful versions of 
personal computers. In two-tiered client/server architecture, a client computer is 
networked to a server with processing split between thè two. In multi-tiered (N- 
tier) client/ server architecture, thè work of thè entire network is balanced over 
several different levels of servers. Distributing work across a number of smaller 
inexpensive machines cost much less than minicomputers or mainframes. 
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(Database Server) 


Enterprise computing era (1992 to present) 

The Internet networking technology Transmission Control Protocol/Internet 
Protocol (TCP/IP) suite enables enterprises to link disparate devices and locai 
area networks (LANs) into single enterprise-wide networks. Integrated 
computing environments allows for much faster and seamless gathering and 
distribution of data. Perhaps no other era has seen thè explosive growth in 
functionality and popularity as this era. The problems created by proprietary, 
closed systems are being solved by thè standards and open-source software 
created in this era. 



Cloud and mobile computing era (2000 to Present) 

Cloud computing is defined as a type of computing that relies on sharing 
computing resources rather than having locai servers or personal devices to 
handle applications. Cloud computing enables companies to consume compute 
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resources as a utility — just like electricity — rather than having to build and 
maintain computing infrastructures in-house. Cloud computing promises several 
attractive benefits for businesses and end users. Three of thè main benefits of 
cloud computing includes: 

—> Self-service Provisioning: End users can spin up computing resources for 
almost any type of workload on-demand. 

—> Elasticity: Companies can scale up as computing needs increase and then 
scale down again as demands decrease. 

—> Pay per use: Computing resources are measured at a granular level, 
allowing users to pay only for thè resources and workloads they use. 





Technology Drivers of Infrastructure Evolution 

There are five important features or characteristics of information technology 
today that act as drivers toward thè expansion and further development of 
technology. These include: 

Moore's Law and Microprocessing Power 

Moore's Law States that microprocessing power doubles in every two years. 
Variations of this law assert that 

• Microprocessing power doubles in every 18 months 

• Computer power doubles in every 18 months 

• The price of computing falls by half in every 18 months. 

Perhaps no other law holds as much weight in thè evolution of computers as 
Moore's Law. Microprocessor chips using transistors have helped increase 
computing power exponentially. At thè same time packing more transistors into 
less space has driven down transistor cost dramatically as well as thè cost of thè 
products in which they are used. An Intel® processors today can contain as 
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many as 1 billion transistors, run at 3.2 GHz and higher, deli ver over 10,000 
MIPS, and can be manufactured in high volumes with transistors that cost less 
than l/10,000th of a cent. 

Nanotechnology uses individuai atoms and molecules to create computer chips 
thousands of times smaller than current technologies permit. Nanotubes have 
potential uses as minuscule wires or in ultrasmall electronic devices. Other 
technologies promise to further miniaturize transistors and improve chip 
technology. 

The Law of Mass Digital Storage 

The Law of Mass Digital Storage States that while thè amount of digitai 
information produced worldwide doubles every year, thè cost of storing digitai 
information is falling at an exponential rate. In thè early evolution of computing, 
Storage needs were based on written text. Now we need thè extra Storage for 
photos, music, and video. From 1980 to 1990, hard disk drive capacities for PCs 
grew at thè rate of 25 percent annual compound growth, but after 1990, growth 
accelerated to more than 65 percent each year. 

Metcalfe's Law and Network Economics 

Metcalfe's Law described thè value of a network grows exponentially with each 
increase in membership to thè network. Demand for information technology has 
been driven by thè social and business value of digitai networks, which rapidly 
multiply thè number of actual and potential links among network members. If 
you build a network for ten users, you'll spend thè necessary money for thè basic 
equipment. If you already have thè equipment in place, you can add one more 
user at nominai costs. However, thè additional user will bring value to thè 
network far beyond what it costs to add him/her. 


Declining Communications Costs and thè Internet 

One of thè biggest drivers in thè exploding use of computers is directly 
attributable to thè Internet. It's getting cheaper every day to connect to thè 
Internet because of declining communication costs. As more and more users 
connect to thè Internet, businesses must find ways to meet thè expectations and 
demands of users, especially in thè area of mobile computing devices. 

The rapid decline of communication costs and thè exponential growth in size of 
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Standards and Network Effects 

Technology Standards and specifications establish thè compatibility of products 
and thè ability to communicate in a network, unleash powerful economies of 
scale and result in price declines as manufacturers focus on products built to a 
certain standard. Some of thè important standards that have shaped IT 
infrastructure include ASCII, UNIX, TCP/IP, Ethernet, thè IBM/Microsoft/Intel 
Personal Computer, and thè World Wide Web. 

ASCII stands for American standard code for information interchange and made 
it possible to exchange data among computers developed by different 
manufacturers. UNIX is an open source multitasking operating System that is 
used by variety by computers developed by different manufacturers. TCP/IP 
stands for transmission control protocol/internet protocol and is a suit of 
communication protocols that defines common language for establishing 
communication between different computers attached in a network. Ethernet 
enables desktop computers to locai area networks. IBM/Microsoft/Intel Personal 
Computer is thè standard Wintel design for personal computers based on Intel 
processors and other devices and Microsoft Windows operating systems. 


Infrastructure Components 

In thè early days of personal computers, thè printer you had your eye on may 
not have worked with your brand of computers. You had to buy a scanner built 
specifically for your computer. You couldn't connect to thè Internet unless you 
had thè correct modem for your Internet Service Provider. The evolution we are 
now experiencing is aiming to fix these problems and make computing 
ubiquitous anytime, anywhere. IT infrastructure is composed of seven major 
components that aim to achieve above mentioned goal. 

1. Computer Hardware Platforms: It includes client machines and server 
machines, as well as modern main frames produced by IBM. Biade 
Servers are ultrathin servers, intended for a single dedicated application, 
and are mounted in space-saving racks. 

2. Operating System Platforms: It includes platforms for client computers, 
dominated by Windows operating systems, and servers, dominated by thè 
various forms of thè UNIX operating System or Linux. Operating 
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Systems are software that manage thè resources and activities of thè 
computer and act as an interface for thè user. 

3. Enterprise and Other Software Applications: It includes SAP, Oracle, and 
PeopleSoft, and middleware software that are used to link a firm's existing 
application Systems. 

4. Data Management and Storage: It is handled by database management 
software and Storage devices include traditional Storage methods, such as 
disk arrays and tape libraries, and newer network-based Storage 
technologies such as Storage area networks (SANs). It is thè network that 
connects multiple Storage devices on dedicated high-speed networks. 

5. Networking and Telecommunications Platforms: It includes Windows 
server operating systems, Novell, Linux, and UNIX. Nearly all LANs and 
many wide area networks (WANs) use thè TCP/IP standards for 
networking. 

6. Internet Platforms: It overlaps with, and must relate to, thè firm's generai 
networking infrastructure and hardware and software platforms. Internet- 
related infrastructure includes thè hardware, software and Services to 
maintain corporate Web sites, intranets, and extranets, including Web 
hosting Services and Web software application development tools. A Web 
hosting Service maintains a large Web server, or series of servers, and 
provides fee-paying subscribers with space to maintain their Web sites. 

7. Consulting and System Integration Services: Theses are relied on for 
integrating a firm's legacy systems with new technology and 
infrastructure and providing expertise in implementing new 
infrastructure along with relevant changes in business processes, training, 
and software integration. Legacy systems are generally older transaction 
processing systems created for mainframe computers that continue to be 
used to avoid thè high cost of replacing or redesigning them. 
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EMC Systems 
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Linux 
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Microsoft Windows Server 
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Linux 
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Hardware Platforms and Emerging Technologies 

If some of these IT infrastructure components like Storage and 
telecommunications have gotten so cheap, why does it seem like companies are 
spending more and more money on information technology? This is because 
users are demanding better, faster, and easier ways to use computers and more 
ways to communicate with others. Let's discuss some of these hardware 
technologies that are helping companies meet thè growing technology demand 
of employees, customers, suppliers, and business partners. 

The Emerging Mobile Digital Platform 

Anytime, anywhere, 24/7, 365. That's what computer users now expect. 
Technology manufacturers are meeting thè demand with a host of new 
communication devices like celi phones and smartphones. The newest gadgets 
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on thè market are tablets and e-book readers like thè Kindle from Amazon.com 
or Barnes & Noble's Nook reader. Smartphones are getting — well — smarter, and 
proving more reasons for users to migrate away from traditional desktop PC 
computing.. Tablets are miniaturized subnotebooks that are built specifically for 
wireless Communications and Internet access. Even though they may be small in 
size, they stili pack a lot of computing power. 

Grid Computing 

Take a moment and think about how much time you don't use your personal 
computer. It's actually quite a lot. In fact, most computers are idle more time 
than not. What if you could combine all thè idle time of hundreds or thousands 
of computers into a continuous, connected computing capacity to capture, 
process, manage, store, and retrieve data? You wouldn't ha ve to purchase 
mammoth, super computers to realize this capability and capacity. 

Grid computing is thè technique that utilizes thè idle computational resources of 
separate, geographically remote computers to create a single Virtual 
supercomputer. In this process, a server computer breaks data and applications 
into discrete chunks that are parceled out to thè grid's machines. Three reasons 
why grid computing is appealing to companies include: 

—> Cost savings 
—» Computational speed 
—» Computational agility 

Virtualization and Multicore Processors 

Virtualization is thè process of presenting a set of computing resources (such as 
computing power or data Storage) so that they can all be accessed in ways that 
are not restricted by physical configuration or geographic location. Server 
virtualization enables companies to run more than one operating System at thè 
same time on a single machine. Most servers run at just 10 to 15 percent of 
capacity, and virtualization can boost utilization server utilization rates to 70 
percent or higher. Here's a list of thè benefits businesses enjoy from using 
virtualization: 

• Increase equipment utilization rates 

• Conserve data center space and energy usage 

• Require fewer computers and servers 

• Combine legacy applications with newer applications 

• Facilitate centralization and consolidation of hardware administration 


70 



A Multicore processor is an integrateci Circuit that contains two or more 
processors. This technology enables two or more processing engines with 
reduced power requirements and heat dissipation to perform tasks faster than a 
resource-hungry chip with a single processing core. 

Cloud Computing and thè Computing Utility 

Cloud computing is already defined in this chapter. Basically, cloud computing 
is defined by five characteristics: 

—> On-demand self-service: Users can access computing capabilities 
whenever and wherever they are. 

—> Ubiquitous network access: No special devices are necessary for 
accessing data or Services. 

—> Location independent resource pooling: Users don't need to be 
concerned about where thè data are stored. 

—> Rapid elasticity: Computing resources expand and contract as necessary 
to serve users. 

—> Measured Service: Users pay only for thè computing capabilities actually 
used. 

Cloud Computing 



Server» 


Platform Services 
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Almost any type of computing device can access data and applications from 
these clouds through three types of Services: 

—> Cloud infrastructure as a Service: Allows customers to process and store 
data, and use networking and other resources available from thè cloud. 

—» Cloud platform as a Service: The Service provider offers infrastructure 
and programming tools to customers so they can develop and test 
applications. 

—» Cloud software as a Service: The vendor provides software programs on a 
subscription fee basis. 

Cloud computing is becoming popular because customers only pay for thè 
computing infrastructure that they actually use. In many cases users experience 
lower IT costs than if they had to buy all thè equipment, hire thè technical staff to 
run it and maintain it, and purchase software applications. This type of on- 
demand computing is beneficiai to small and medium-size companies since they 
can easily scale up and down their IT requirements as thè pace of their business 
demands it. Larger organizations however, may not want their most sensitive 
data stored on servers which they don't control. System reliability is also a 
special concern to all businesses. The unavailability of business data and 
applications for even a few hours may be unacceptable. Three kinds of clouds are 
available: 

—» Public cloud: A public cloud is basically thè internet. Service providers 
use thè internet to make resources, such as applications and Storage, 
available to thè generai public. Examples of public clouds include 
Amazon Elastic Compute Cloud (EC2), IBM's Blue Cloud, Sun Cloud, 
Google AppEngine and Windows Azure Services Platform. 

—» Private cloud: These clouds are data center architectures owned by a 
single company that provides flexibility, scalability, provisioning, 
automation and monitoring. The goal of a private cloud is not sell "as-a- 
service" offerings to external customers but instead to gain thè benefits of 
cloud architecture without giving up thè control of maintaining your own 
data center. 

—» Hybrid cloud: By using a Hybrid clud, companies can maintain control of 
an internally managed private cloud while relying on thè public cloud as 
needed. For instance during peak periods individuai applications, or 
portions of applications can be migrated to thè Public Cloud. 
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Autonomie Computing 

Autonomie computing is a step toward creating an IT infrastructure that is able 
to diagnose and fix problems with very little human intervention. It is an 
industry-wide effort to develop systems that can configure, optimize, repair, and 
protect themselves against intruders and viruses, in an effort to free System 
administrators from routine System management, reduce costly System crashes. 
Today's virus software with automatic virus updates is one example of 
autonomie computing. Thus autonomie computing features systems that can: 

—» Configure themselves 
—> Optimize and tune themselves 
—» Heal themselves when broken 

—> Protect themselves from intruders and self-destruction 

Although this type of computing is stili rather new, it promises to relieve thè 
burden many companies experience in trying to maintain massive, complex IT 
inf r astructures. 

Software Platform Trends and Emerging Technologies 

You can have all thè computer hardware money can buy, but if you don't have 
thè right software, you can't do very much with thè hardware and you've wasted 
a lot of money. There are five major themes in contemporary software platform 
evolution: 

1. Linux and open-source software 

2. Java 

3. Enterprise software 

4. Web Services and service-oriented architecture 

5. Software outsourcing 


Linux and Open-Source Software 

Open-Source software is software produced by a community of several hundred 
thousands of programmers around thè world, and is available free of charge to 
be modified by users, with minimal restrictions. The premise that open-source 
software is superior to commercial software is based on thè ability of thousands 
of programmers modifying and improving thè software at a much faster rate. In 
return for their work, programmers receive prestige and access to a network of 
other programmers, and additional for-pay work opportunities. The process of 
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improving open source software is monitored by self-organized, professional 
programming communities. Thousands of open-source programs, ranging from 
operating systems to office suites, are available from hundreds of Web sites. 

Linux is an operating System related to UNIX, is one of thè most well-known 
open-source software, and is thè world's fastest growing client and server 
operating System, along with related Linux applications. The rise of open-source 
software, particularly Linux and thè applications it supports, has profound 
implications for corporate software platforms: cost reduction, reliability and 
residence, and integration, because Linux works on all thè major hardware 
platforms from mainframes to servers to clients. Because of its reliability, low 
cost, and integration features, Linux has thè potential to break Microsoft's 
monopoly of thè desktop. 

Open-source software isn't limited to Linux but includes applications such as 
Mozilla Firefox Web browser and free office suite software such as OpenOffice. 
OpenOffice.org is thè result of over twenty years' software engineering. 
Designed from thè start as a single piece of software, it has a consistency other 
products cannot match. 

Software for thè Web: Java, AJAX, and HTML 

Java is an operating system-independent, object-oriented programming 
language, has become thè leading programming environment for thè Web, and 
its use has migrated into cellular phones, cars, music players, and more. For each 
of thè computing environments in which Java is used, Sun has created a Java 
Virtual Machine that interprets Java programming code for that machine. In this 
manner, thè code is written once and can be used on any machine for which 
there exists a Java Virtual Machine. A Macintosh PC, an IBM PC running 
Windows, a Sun server running UNIX, and even a smart cellular phone or 
personal digitai assistant can share thè same Java application. 

AJAX stands for Asynchronous JavaScript and XML. AJAX is a new technique 
for creating better, faster, and more interactive web applications with thè help of 
XML, HTML, CSS, and Java Script. Conventional web applications transmit 
information to and from thè sever using synchronous requests. It means you fili 
out a form, hit submit, and get directed to a new page with new information 
from thè server. With AJAX, when you hit submit, JavaScript will make a request 
to thè server, interpret thè results, and update thè current screen. In thè purest 
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sense, thè user would never know that anything was even transmitted to thè 
server. Simply we can say that AJAX is about updating parts of a web page, 
without reloading thè whole page. 

Hypertext markup language (HTML) is thè language that used for creating web 
pages. The originai version of HTML was created when thè Web was first borne. 
It never took into account that eventually people would want to incorporate 
audio, video, and pictures within a Web page. More importantly, thè authors of 
basic HTML language never envisioned that people would want to access thè 
Web through small handheld devices, smartphones, tablets, and notebooks. As 
our computing hardware has evolved, so too must thè software that provides 
information to all those devices. The next evolution of HTML is HTML5. 

Web Services and Service-Oriented Architecture 

Web Services are XML-based information exchange systems that use thè Internet 
for direct application-to-application interaction. These systems can include 
programs, objects, messages, or documents. Software applications written in 
various programming languages and running on various platforms can use web 
Services to exchange data over computer networks like thè Internet in a manner 
similar to inter-process communication on a single computer. This 
interoperability (e.g., between Java and Python, or Windows and Linux 
applications) is due to thè use of open standards. Four software standards and 
communication protocols provide easy access to data and information via Web 
Services: 

—» XML — eXtensible Markup Language: Describes data in Web pages and 
databases. 

—» SOAP —Simple Object Access Protocol: Allows applications to exchange data 
and instructions. 

—> WSDL —Web Services Description Language: Describes a Web Service so that 
other applications can use it. 

—> UDDI —Universal Description, Discovery, and Integration: Lists Web Services 
in a directory so users can find them. 

A service-oriented architecture (SOA) is architecture in computer software 
design in which application components provide Services to other components 
via a communication protocol, typically over a network. The principles 
of service-orientation are independent of any vendor, product or technology. 
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Software Outsourcing and Cloud Services 

Like businesses were going to outside vendors to meet their hardware needs, 
Organizations are now doing much thè same for their software needs. Three 
external sources for software outsourcing are: Software packages from a 
commercial vendor, cloud-based software Services and tools, and outsourcing 
custom application development 

—> Software Packages and Enterprise Software: A commercial software 
package is a prewritten set of software programs for certain functions, 
eliminating thè need for a firm to write its own software program. 
Rather than design, write, test, and maintain legacy systems, many 
organizations choose to purchase software packages from other 
companies that specialize in certain programs. Enterprise software is 
large and complex software that includes content, collaboration, and 
communication software. These systems are so complex that few 
corporations have thè expertise to develop these in house. Vendors such 
as SAP and PeopleSoft have developed powerful software packages that 
can support business processes such as customer relationship 
management, supply chain management, human resource management. 

—» Software Outsourcing: Outsourcing is a mechanism in which a firm 
contracts custom software development or maintenance to outside firms, 
normally to thè firms operating in low-wage areas of thè world. With 
thè growing sophistication and experience of offshore firms, more and 
more new-program development is outsourced. The Internet has made 
this option more viable than it ever was. Companies primarily outsource 
to reduce certain costs — such as peripheral or "non-core" business 
expenses, high taxes, high energy costs, excessive government 
regulation/mandates, production and/or labor costs. The incentive to 
outsource may be greater for U.S. companies due to unusually high 
corporate taxes and mandated benefits, like social security. Medicare, 
and safety protection 

—» Cloud-based Software Services and Tools: Small and mid-size companies 
in need of sophisticated software can rent only what they need and can 
afford through online software as a Service (SaaS) providers. For 
instance, Right Now Technologies provides applications Services via thè 
Internet for customer Service and marketing programs. Because these 
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Services are Web-based, data are accessible from virtually any computer 
connected to thè Internet. Workers can collaborate with others in distant 
offices through a Web-based SaaS, and no one has to worry about their 
files being compatible with others. There is some danger to outsourcing 
your information resources to this kind of Service. Remember, all your 
data are stored on another company's server computers and you have 
little control of it. What happens if thè Service provider goes out of 
business? How secure are data stored on thè servers? These are just 
some of thè issues managers must address when they consider using 
SaaS providers versus in-house technology support. Businesses must 
exercise caution when using software outsourcing or SaaS providers. 
Service level agreements (SLA) help protect both customers and thè 
Service providers. 

Mashups and Apps 

The term mash-up refers to a new breed of Web-based applications created 
by programmers to mix at least two different Services from disparate, and even 
competing, Web sites. The term mash-up comes from thè hip-hop music practice 
of mixing two or more songs. Mash-ups are often created by using a 
development approach called Ajax . Here's a sampling of mash-up Web sites: 

-> Panoramio : a mash-up of Google Maps and geopositioned photographs 
of locations 

-> Hiking Outpost : a mash-up of Amazon and online hiking information 
resources 

-> HousingMaps : a mash-up of Google Maps and Craigslist rental ads that 
displays geographical information for rental properties. 

App is an abbreviated form of thè word application, and are very small 
programs that perform one particular task. They can be loaded to your hand- 
held computing device, including smartphones, e-book readers (in some cases) 
or tablet computers like thè iPad. It's worth noting that most apps are developed 
for a specific device or devices from a specific company. Apps that are written 
for thè Apple company will run on any Apple de vice. However, apps written for 
an Apple device will generally not run on a device manufactured or sold by 
Samsung or a BlackBerry. More and more apps are being created for thè business 
user that lets her access server documents, cali up sales data from thè corporate 
database, or schedule meetings with colleagues or customers. 
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Chapter Unit 6 

Foundations of Business Intelligence: Databases and Information 

Management 

Data vs. Information 

Data is raw facts collected from environment about physical phenomena or 
business transactions. Data can be in any form-numerical, textual, graphical, 
image, sound, video etc. It has no meaning. It is input to any System in an 
organization. For example, data would be thè marks obtained by students in 
different subjects. 

On thè other hand information is defined as refined or processed data that has 
been transformed into meaningful and useful form for specific users. For 
example, after processing thè marks obtained by student it transformed into 
information, which is meaningful and from which we can decide which student 
stood first, second and so forth. Information comes from data and takes thè form 
of table, graphs, diagrams etc. 

Data hierarchy \file organization concept 

A computer System organizes data in a hierarchy that starts with bits and bytes 
and progresses to fields, records, files, and databases. A bit represents thè 
smallest unit of data a computer can handle. A group of bits, called a byte, 
represents a single character, which can be a letter, a number, or another symbol. 
A grouping of characters into a word, a group of words, or a complete number 
(such as a person's name or age) is called a field. A group of related fields, such 
as thè student's name, thè course taken, thè date, and thè grade, comprises a 
record; a group of records of thè same type is called a file. 






Organizing Data in a traditional file environment 

File management systems (FMS) are also called fiat file systems. It stores data in 
a plain text file. A fiat file is a file that contains records, and in which each record 
is specified in a single line. Fields from each record may simply have a fixed 
width with padding, or may be delimited by whitespace, tabs, commas or 
other characters. Extra formatting may be needed to avoid delimiter collision. 
There are no structural relationships and thè data are "fiat" as in a sheet of paper. 
For example, thè records in Figure below could constitute an author file. A group 
of related files makes up a database (E.g. files author, hook, and publisher etc 
makes up a database publication). The author file illustrated in Figure below 
could be grouped with files on hook and publisher to create a publication 
database. 



In this approach each application has data files related to it containing all thè 


data records needed by thè application. Thus, an organization has to develop 
number of application programs each with an associated application-specific 
data files. For example, in a college MIS, thè library programs, accounting 


79 




































programs, and examination programs would have their own data files as shown 
in figure below: 


Library 

Programs 



fd 3^1 


■ Student Data 

■ Teacher Data 

■ Book Data 

■ Book Issue Data 

Library Data 
Files 

1 —: 



Problems with thè traditional file environment 

The key problems in thè traditional file environment are listed below: 

Data Redundancy 
Data Inconsistency 
Data Isolation 

Difficulties in accessing data 
Integrity problem 
Atomicity problem 
Concurrent access anomalies 
Security problems 

Data redundancy: Data redundancy means duplication of same data or data files 
in different places. Fiat file systems are suffered from thè problem of high data 
redundancy. For example, record (such as student id, name, level, program, 
section etc) of a student may appear in library data files as well as examination 
data files. This redundancy leads to higher Storage and access cost. On thè other 
hand database management systems can greatly reduce thè problem of data 
redundancy. Note that DBMS cannot remove data redundancy problem 
completely. 
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Data inconsistency: Data inconsistency is side effect of data redundancy. Data is 
said to be inconsistent if various copies of thè same data may no longer agree. 
Data inconstancy occurs if changed data is reflected in data files in one place but 
not elsewhere in thè System. For example, if library data file contains celi number 
of a student as 9841567843 but examination data files Stores 9851167895 as celi 
number of thè student then we can say that data is inconsistent. Fiat file systems 
may suffer from thè problem of data inconsistency. But database systems can 
remove thè problem of data inconstancy by automatically propagating data 
updates done in one file in thè database in other data files. 


Data isolation: Because data are scattered in various files, and files may be in 
different formats, writing new application programs to retrieve thè appropriate 
data is difficult in fiat file systems. For example, one data file may contain data 
separated of comma and another data file may contain data separated by white 
space. 


Student Data file 

Book Data file 

501, Suman, BBA,Mahendranagar 

502, Binu, B.Sc. CSIT, Kathmandu 

503, Ronit, B.E. Computer, Chitwan 

B05 DBMS SaudArjun Kanchanpur 

B06 java. SharmaDilli Baglung 

B07 MIS Bhattajagadish Kanchanpur 


(àj [bj 

Figure: Data files (a) Data separated by comma (b) Data separated by white space 


Database management systems provide shared access to centrally stored data 
therefore it is easy for application programs to retrieve required data from 
centralized database. Application programs do not need to bother about format 
of stored data. 

Difficulty in accessing data: File processing systems do not allow required data 
to be retrieved in efficient and convenient way. For example, assume we already 
have program to generate thè list of books on thè basis of subject. Now, if we 
need to generate thè list of books on thè basis of author name, either we need to 
extract thè data from book data files manually or we should request thè 
programmer to write a program to retrieve required data from thè book data file. 
Both of thè alternatives are not satisfactory. 
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Integrity problems: Integrity means correctness of data before and after 
execution of a transaction. Integrity constraints are condition applied to thè data. 
For example, if maximum salary in an organization is 150,000 then we have thè 
integrity constraint "salary < 150,000". Integrity constraints are important to 
maintain correctness of data. It plays vital to prevent users from doing mistakes. 
For example, if user mistakenly types 200,000 in place of 20,000 while 
transferring salary of an employee in his/her account, specified integrity 
constrain is violated and hence thè System teli thè user about thè mistake. 
Unfortunately, fiat file systems do not allow us to specify integrity constraint and 
hence it is difficult to maintain correctness of data. On thè other hand, database 
management systems allow us to specify integrity constraints on data therefore 
relatively it is easy to maintain correctness of data 

Atomicity problems: Execution of transactions must be atomic. This means 
transactions must execute at its entirety or not at all. If execution of transaction is 
not atomic, it leaves database in incorrect sate. Consider thè example of 
transaction that transfers 5000 rupees from account A to account B. 

If thè execution of transaction is failed at thè point specified in above figure, it 
causes 5000 rupees to be deducted from account A without depositing it in 
account B. File processing System do not guarantee atomic execution of 
transactions and hence this type of problems may occur in databases. But 
database systems guarantees atomicity of execution of transaction and hence 
above mentioned problem can be eliminated. 


Point of 
Failnre 


Concurrent-access anomalies: Concurrent updates to same data by different 
transactions at thè same time may result in inconsistent data. Consider bank 
account 'A', containing 50,000 Rs. If two customers withdraw funds say 15,000 


Read (A) 
A=A-5000 
Write ( 4 )- 
Read (B) 
B=B+5000 
Write (B) 
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and 20,000 respectively from account A at about thè same time, thè result of thè 
concurrent executions may leave thè account in an incorrect (or inconsistent) 
state, if thè programs executing on behalf of each withdrawal read thè old 
balance as below. Fiat file systems do not supports execution of concurrent 
transactions and hence may suffer from thè problem mentioned below. But, 
database systems support concurrent execution of transactions on thè same data 
without resulting into inconstant data. 


Withdraw by Customerl 

Withdraw by Customer2 

(Tl) 

(T2) 

Read (A) 

A=A-15000 

Read (A) - 

A=A-20000 

Write (A) 

Write (A) 




Reads old balance 
Final Balance=30000 
Wrong! !!!!!!! 

It must be 15000 


Security problems: In database System we may create different user accounts 
and provide different authorization to different users. Thus we are able to hide 
certain information from some users. For example, in a banking System, payroll 
personnel need to see only that part of thè database that has information about 
thè various bank employees. They do not need access to information about 
customer accounts. This type of restriction is essential for security purpose. But, 
file processing System do not allow us to create user accounts thus all users have 
equal access to thè data. Due to this it is difficult to maintain security of fiat file 
systems. Besides this file processing systems do not have any provisions for 
periodic backup of data and recovery from data loss which are provided by 
database management systems. 


The database approach to data management 

Database technology cuts through many of thè problems of traditional file 
organization. A more rigorous definition of a database is a collection of data 
organized to serve many applications efficiently by centralizing thè data and 
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controlling redundant data. Rather than storing data in separate files for each 
application, data are stored so as to appear to users as being stored in only one 
location. 


Database Management Systems (DBMS) 

A database is an organized collection of logically related data that contains 
information relevant to an enterprise. The database is also called thè repository 
or container for a collection of data files. For example, university database 
maintains information about students, courses and grades in university. 

A Database Management System (DBMS) is thè set of programs that is used to 
store, retrieve and manipulate thè data in convenient and efficient way. Main 
goal of database management System (DBMS) is to hide underlying complexities 
of data management from users and provide easy interface to them. Some 
common examples of thè DBMS software are Oracle, Sybase, Microsoft SQL 
Server, DB2, MySQL, Postgres, Dbase, Ms-Access etc. Database management 
System that maintains relationship between multiple data files is called 
Relational Database Management System (RDBMS). 


Student 


S-ID 

Name 

Address 

Program-ID 

S-12 

Pawan 

Joshi 

C002 

S-14 

Yamman 

Karki 

C021 

S-51 

Abin 

Saud 

C321 

S-ll 

Binak 

Singh 

C112 


Fi 


Program-ID 

Program-Name 

C002 

BBA 

C021 

B. Se CSIT 

C112 

BIM 

C321 

B. ed. 


g ; 

A 


t 


Foreign Keys breign key 
database System consists of 
database, . d Program igement 
System, and application programs. 


are that uses DBMS for data 
us MS word is just an application 


Simply, we can say th Relationships 
management is called database System, 
program but it is not databas< Primary Keys ? it does not use DBMS for thè 
purpose of managing data. On thè other hand a library management information 
System can be database System if it uses DBMS for thè purpose managing 
database. As mentioned above database is a repository for a collection of 
computerized data files. Users of database System can perform a variety of 
operati on on such file. For example, in a database management System, thè 
library System, accounting management System, and examination System 
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programs would have a common database. This database based approach to data 


processing is shown in fig below: 



Figure: Database System approach to data processing 


Capabilities of database Management systems 

A DBMS includes capabilities and tools for organizing, managing, and accessing 
thè data in thè database. The most important are its data definition language, 
data dictionary, and data manipulation language. 

DBMS have a data definition capability to specify thè structure of thè content of 
thè database. It would be used to create database tables and to define thè 
characteristics of thè fields in each table. This information about thè database 
would be documented in a data dictionary. A data dictionary is an automated or 
manual file that Stores definitions of data elements and their characteristics. 

The key capabilities of database management systems are listed below: 

Querying and reporting 

Maintaining complex relationship among data 

Provide backup and recovery 

Data availability 

Maintaining data integrity 

Minimize data redundancy 

Improve data security 

Handling concurrent access anomalies 

Querying and reporting 

The database contains thè huge amount of data. Querying helps to filter thè data 
and present only what thè user requires. The most popular type of query 
language is SQL. It uses English like structured syntax for creating queries. 

Now after filtering data from thè database through query languages it is equally 
necessary to present thè data in an appropriate structure. DBMS have thè 
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capabilities to generate reports on thè user-desired data based on user-desired 
structure. Crystal report is a popular report generator for large corporate DBMS. 


Maintaining complex relationship among data 

A database is thè collection of interrelated data. The DBMS has thè capabilities of 
creating a link between thè data in various tables. This capability helps to 
retrieve complete information in a timely fashion as well as efficient update of 
data. In DBMS this type of relation can be created by using thè concept of 
primary key and foreign key i.e. using referential integrity constraint concept. 

Provide backup and recovery 

DBMS has thè capability to create a backup of thè data. This backup can be used 
to recover thè lost data when accidental loss of data occurs. 

Data availability 

One of thè principle advantages is that thè same business data can be made 
available to different employees anytime anywhere. DBMS enables multi-user 
access to information that is available remotely and 24 hours a day, 7 days a 
week. 

Maintaining data integrity 

Data accuracy, consistency and relevant data is a sign of data integrity. With thè 
help of DBMS, companies can foster thè integrity of their business records 
because changes to thè data only have to be made in one place. 

Minimize data redundancy 

DBMS has thè capabilities to keep thè relationship among different tables due to 
which there is less chances of data redundancy. Information in DBMS is kept 
concise and appears just once. This capability reduces data redundancy. 

Improve data security 
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DBMS allows user authentication through password. Authorized users can 
access only thè data for which they are granted privilege. Thus it provides a 
System of permissions to restrict user access to certain data resources. 

Handling concurrent access anomalies 

Database management System prevents from accessing thè data concurrently. It 
is achieved through isolation, which guarantees that other operations cannot 
access data that are being processed or modified during thè transaction until it is 
completed. 


How a DBMS Solves thè Problems of thè Traditional File Environment? 

A DBMS reduces data redundancy and inconsistency by minimizing 
isolated files in which thè same data are repeated. The DBMS may not enable thè 
organization to eliminate data redundancy entirely, but it can help control 
redundancy. Even if thè organization maintains some redundant data, using a 
DBMS eliminates data inconsistency because thè DBMS can help thè organization 
ensure that every occurrence of redundant data has thè same values. The DBMS 
uncouples programs and data, enabling data to stand on their own. Access and 
availability of information will be increased and program development and 
maintenance costs reduced because users and programmers can perform ad hoc 
queries of data in thè database. The DBMS enables thè organization to centrally 
manage data, their use, and security. 

Designing Database 

To create a database, you must understand thè relationships among thè data, thè 
type of data that will be maintained in thè database, how thè data will be used, 
and how thè organization will need to change to manage data from a company- 
wide perspective. Designing a database requires an understanding of thè 
business functions you want to model. It also requires an understanding of thè 
database concepts and features that you want to use to represent those business 
functions. Make sure that you accurately design thè database to model thè 
business, because it can be time-consuming to significantly change thè design of 
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a database after you implement it. A well-designed database also performs 
better. 

The database requires both a conceptual design and a physical design. The 
conceptual, or logicai, design of a database is an abstract model of thè database 
from a business perspective, whereas thè physical design shows how thè 
database is actually arranged on direct-access Storage devices. 

The conceptual database design describes how thè data elements in thè database 
are to be grouped. The design process identifies relationships among data 
elements and thè most efficient way of grouping data elements together to meet 
business information requirements. The process also identifies redundant data 
elements and thè groupings of data elements required for specific application 
programs. Groups of data are organized, refined, and streamlined until an 
overall logicai view of thè relationships among all thè data in thè database 
emerges. 

The conceptual database design deals with two important concepts: 
Normalization and 
Entity relationship diagram 

1) Normalization 

"The process of decomposing unsatisfactory " bad " relations by breaking up their 
attributes into smaller relations is called normalization" 

While designing a database out of an entity-relationship model, thè main 
problem existing in that raw database is redundancy. Redundancy is storing thè 
same data item in more one place. A redundancy creates several problems like 
thè following: 

■ Extra Storage space: storing thè same data in many places takes large 
amount of disk pace. 

■ Entering same data more than once during data insertion. 

* Deleting data from more than one place during deletion. 

* Modifying data in more than one place. 

■ Anomalies may occur in thè database if insertion, deletion, modification 
etc are no done properly. It creates inconsistency and unreliability in thè 
database. 

To solve this problem, thè raw database needs to be normalized. This is a step by 
step process of removing different kinds of redundancy and anomaly at each 
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step. At each step a specific rule is followed to remove specific kind of impurity 
in order to give thè database a slim and clean look. The process of reducing data 
redundancy and removing database modification anomaly in a relational 
database is called normalization. 

In brief thè process of creating small, stable, yet flexible and adaptive data 
structures from complex groups of data is called normalization. 

Example: Let's take a relation that is in un-normalized form as, 

Student 


Sid 

Sname 

Address 

Phone_No 

1 

Bishnu 

Kalanki 

9849145464, 9813335467 

2 

Ramhari 

Balkhu 

9841882345, 099392844 

3 

Geeta 

Kirtipur 

9848334898, 

4 

Dipika 

Pokhara 

9849283847 

5 

Monika 

Ratopool 

9840084732, 9803267499 


Since in this relation multi-valued attribute exist thus this relation is not in 
normalized form. Now converting this relation into normal form by 
decomposing this relation into two relations as, 


Student 


Sid 

Sname 

Address 

1 

Bishnu 

Kalanki 

2 

Ramhari 

Balkhu 

3 

Geeta 

Kirtipur 

4 

Dipika 

Pokhara 

5 

Monika 

Ratopoo 

1 


Fig: Relations in Normalized 


Phone 


Sid 

Phone_No 

1 

9849145464 

1 

9813335467 

2 

9841882345 

2 

099392844 

3 

9848334898 

4 

9849283847 

5 

9840084732 

5 

9803267499 


Example 2: Employee-Department 


Emp-Id 

Emp-Name 

Emp-Salary 

Dept-No 

Dept-Name 

1 

Bhupi 

40000 

DI 

BBA 

1 

Bhupi 

40000 

D2 

CSIT 

2 

Bindu 

30000 

D3 

BBS 
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3 

Arjun 

60000 

DI 

CSIT 


In thè above relation {Emp-Id, Dept-No} is thè primary key. Emp-Name, Emp- 
Salary and Dept-Name all depend upon {Emp-Id, Dept-No}. Again Emp- 
Id-^Emp-Name, Emp-Id ->Emp-Salary and Dept-No-^Dept-Name, thus there 
also occur partial dependency. Due to which this relation is not in 2 NF. 

Now converting this relation into 2 NF by decomposing this relation into three 
relations as, 

Employee 


Fig: Relations in 2 NF 

2) Entity relationship diagram 

An E-R diagram is a specialized graphical tool that demonstrates thè 
interrelationships among various entities of a database. It is used to represent thè 
overall logicai structure of thè database. While designing E-R diagrams, thè 
emphasis is on thè schema of thè database and not on thè instances. This is 
because thè schema of thè database is changed rarely; however, thè instances in 
thè entity and relationship sets change frequently. Thus, E-R diagrams are more 
useful in designing thè database. E-R diagram focuses high level database design 
and hides low level details of database representation therefore it can be used to 
communicate with users of thè System while collecting informati on. 

Example: 



Eld 

E_Name 

E_Salary 

1 

Bhupi 

40000 

2 

Bindu 

30000 

3 

Arjun 

60000 


Emp-Dept Department 


Eld 

D_No 

1 

DI 

1 

D2 

2 

D3 

3 

DI 


D_No 

D_Name 

DI 

BBA 

D2 

CSIT 

D3 

BBS 
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Usine databases to improve business performance and decision 
making 

In a large company, with large databases or large systems for separate functions, 
such as manufacturing, sales, and accounting, special capabilities and tools are 
required for analyzing vast quantities of data and for accessing data from 
multiple systems. These capabilities include data warehousing, data mining, and 
tools for accessing internai databases through thè Web. 

Data Warehouse 

A data warehouse is a repository of multiple heterogeneous data sources 
organized under a unified schema at a single site to facilitate management 
decision making. A data warehouse is a subject-oriented, integrated, time-variant 
and nonvolatile collection of data in support of management's decision-making 
process. 

a. Subject-Oriented: A data warehouse can be used to analyze a 
particular subject area. For example, "sales" can be a particular subject. 

b. Integrated: A data warehouse integrates data from multiple data 
sources. For example, source A and source B may ha ve different ways of 
identifying a product, but in a data warehouse, there will be only a single 
way of identifying a product. 

c. Time-Variant: Historical data is kept in a data warehouse. For 
example, one can retrieve data from 3 months, 6 months, 12 months, or 
even older data from a data warehouse. This contrasts with a transactions 
System, where often only thè most recent data is kept. For example, a 
transaction System may hold thè most recent address of a customer, where 
a data warehouse can hold all addresses associated with a customer. 

d. Non-volatile: Once data is in thè data warehouse, it will not 
change. So, historical data in a data warehouse should never be altered. 

A data warehouse is a repository of current and historical data of an 
organization that are organized to facilitate reporting and analysis. The data 
originate in many core operational transaction systems, such as systems for sales, 
customer accounts, and manufacturing, and may include data from Web site 
transactions. The data warehouse consolidates and standardizes information 
from different operational databases so that thè information can be used across 
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thè enterprise for management analysis and decision making. Figure below 
illustrates how a data warehouse works. The data warehouse makes thè data 
available for anyone to access as needed, but it cannot be altered. A data 
warehouse System also provides a range of ad hoc and standardized query tools, 
analytical tools, and graphical reporting facilities. Many firms use intranet 
portals to make thè data warehouse information widely available throughout thè 
firm. 



Data warehouse 
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How does a data warehouse differ from a database? 

There are a number of fundamental differences which separate a data warehouse 
from a database. The biggest difference between them is that most database place 
an emphasis on a single application, and this application will generally be one 
that is based on transaction. If thè data is analyzed, it will be done within a single 
domain. In contrast, data warehouses deal with multiple domains 
simultaneously. 

Because data warehouse deals with multiple subject areas, thè data warehouse 
finds connections between them. This allows thè data warehouse to show how 
thè company is performing as a whole, rather than in individuai areas. 

Another powerful aspect of data warehouse is their ability to support thè 
analysis of trends. They are not volatile, and thè information stored in them 
doesn't change as much as it would in a common database. Some of thè major 
differences between them are listed below: 


Database 

Data Warehouse 

1. In database tables and joins of 
different tables are complex since 
they are normalized for RDBMS. 

This is done to reduce redundant 

data and to save Storage space. 

2. Entity Relational modeling 

techniques are used for RDBMS 
database design. 

3. Performance is low for analysis 
queries. 

4. Database is thè place where thè data 
is taken as a base and managed to 
get available fast and efficient access. 

5. Optimized for write operation. 

6. Used for Online Transaction 

Processing (OLTP) but can be used 
for other purpose such as data 
warehousing. This records thè data 
from thè user for history. 

1. In data warehouse tables and joins 
are simple since they are de- 

normalized. This is done to reduce 

thè response time for analytical 
queries. 

2. Data modeling techniques are used 
for Data Warehouse design. 

3. High performance for analytical 
queries 

4. Data warehouse is thè place where 
thè application data is managed for 
analysis and reporting purpose. 

5. Optimized for read operations. 

6. Used for Online Analytical 
Processing (OLAP). This reads thè 

historical data for thè users for 

business decision. 
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Data Marts 

Data mart is a database that contains a subset of data present in a data 
warehouse. We can divide a data warehouse into data marts after thè data 
warehouse has been created. A data mart is a subset of a data warehouse in 
which a summarized or highly focused portion of thè organization's data is 
placed in a separate database for a specific population of users. For example, a 
company might develop marketing and sales data marts to deal with customer 
information. A data mart typically focuses on a single subject area or line of 
business, so it usually can be constructed more rapidly and at lower cost than an 
enterprise-wide data warehouse. 



Reasons for creating a data mart 

• Creates collective view by a group of users 

• Easy access to frequently needed data 

• Ease of creation 

• Improves end-user response time 

• Lower cost than implementing a full data warehouse 

• Potential users are more clearly defined than in a full data warehouse 

• Contains only business essential data and is less cluttered 

Tools for business Intelligence 
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Once data have been captured and organized in data warehouses and data 
marts, they are available for further analysis using tools for business intelligence. 
Business intelligence tools enable users to analyze data to see new patterns, 
relationships, and insights that are useful for guiding decision making. Principal 
tools for business intelligence include software for database querying and 
reporting, tools for multidimensional data analysis (online analytical processing), 
and tools for data mining. 

Online analytical processing (OLAP): Multidimensional data analysis 

OLAP supports multidimensional data analysis, enabling users to view thè same 
data in different ways using multiple dimensions (data cube). Multidimensional 
data models are designed expressly to support data analyses. The goal of 
multidimensional data models is to support analysis in a simple and faster way 
by executives, managers and business professionals. These people are not 
interested in thè overall architecture. 

Suppose your company sells five different products — Laptops, 
Computers, TVs, Camera and Mobiles —in thè East, West, North and Central 
regions. If you wanted to ask a fairly straightforward question, such as how 
many Computers were sold in thè last week, you could easily find thè answer by 
using sales database. But what if you wanted to know how many Computers 
sold in each of your sales regions and compare actual results with projected 
sales, then thè querying becomes complicated. In such a case OLAP is used. 

Each aspect of information — product, pricing, cost, region, or time 
period — represents a different dimension. So, a product manager could use a 
multidimensional data analysis tool to learn how many Computers were sold in 
thè East reason in this week, how that compares with thè previous week, and 
how it compares with thè sales forecast. OLAP enables users to obtain online 
answers to ad hoc questions such as these in a fairly rapid amount of time, even 
when thè data are stored in very large databases, such as sales figures for 
multiple years. 


Time 

Product 

Location 

Sales 

2072-01-01 

Computer 

East region 

30 

2072-01-01 

Laptop 

West region 

20 

2072-01-01 

Camera 

Central region 

50 

2072-01-07 

Mobile 

East region 

11 
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2072-01-07 

TV 

North region 

23 

2072-01-15 

Computer 

West region 

54 

2072-01-15 

Laptop 

Central region 

09 

2072-01-25 

Laptop 

East region 

32 

2072-01-25 

TV 

West region 

19 


Fig: Tabular representation 



Time 


25 createci to represent 


Data mining refers to extracting or "mining" knowledge, interesting information 
or patterns from large amount of data. Data mining is a process of discovering 
interesting knowledge from large amounts of data stored either, in database, 
data warehouse, or other information repositories. 

It is thè semi-automatic process of extracting and identifying patterns 
from stored data. A data mining application, or data mining tool, is typically a 
software interface which interacts with a large database containing customer or 
other important data. Data mining is widely used by companies and public 
bodies for such uses as marketing, detection of fraudulent activity etc. That is, 
data mining deals with "knowledge discovery in databases. There are a wide 
variety of data mining applications available, particularly for business uses, such 
as Customer Relationship Management (CRM). 

These applications enable marketing managers to understand thè behaviors of 
their customers and also to predict thè potential behavior of prospective clients. 

Data mining is a logicai process that is used to search through large 
amount of data in order to find useful data. The goal of this technique is to find 
patterns that were previously unknown. Once these patterns are found they can 
further be used to make certain decisions for development of their business. 
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Functions of data mining 

The types of information obtainable from data mining include associations, 
sequences, classifications, clusters, and forecasts. 

• Association: Association is one of thè best known data mining technique. 
In association, a pattern is discovered based on a relationship between 
items in thè same transaction. That is thè reason why association 
technique is also known as relation technique. The association technique is 
used in market basket analysis to identify a set of products that customers 
frequently purchase together. For instance, books that tends to be bought 
together. If a customer buys a hook, an online bookstore may suggest 
other associated books. If a person buys a camera, thè System may suggest 
accessories that tend to be bought along with cameras. 

• Prediction: The prediction, as it name implied, is one of a data mining 
techniques that discovers relationship between independent variables and 
relationship between dependent and independent variables. For 
instance, thè prediction analysis technique can be used in sale to predict 
profit for thè future if we consider sale is an independent variable, profit 
could be a dependent variable. For instance, when a person applies for a 
credit card, thè credit-card company wants to predict if thè person is a 
good credit risk. The prediction is to be based on known attributes of thè 
person, such as age, income, debts, and past debt repayment history. 

• Classification: Classification is a classic data mining technique based on 
machine learning. Basically classification is used to classify each item in a 
set of data into one of predefined set of classes or groups. Classification 
method makes use of mathematical techniques such as decision trees, 
linear programming, neural network and statistics. For example, we can 
apply classification in application that "given all records of employees 
who left thè company; predict who will probably leave thè company in a 
future period." In this case, we divide thè records of employees into two 
groups that named "leave" and "stay". And then we can ask our data 
mining software to classify thè employees into separate groups. 

• Clustering: Clustering is a data mining technique that makes meaningful 
or useful cluster of objects which have similar characteristics using 
automatic technique. The clustering technique defines thè classes and puts 


97 



objects in each class, while in thè classification techniques, objects are 
assigned into predefined classes. For example in a library, there is a wide 
range of books in various topics available. The challenge is how to keep 
those books in a way that readers can take several books in a particular 
topic without hassle. By using clustering technique, we can keep books 
that have some kinds of similarities in one cluster or one shelf and label it 
with a meaningful name. 


Text mining 

Text mining is thè discovery of patterns and relationships from large sets of 
unstructured data — thè kind of data we generate in e-mails, phone 
conversations, blog postings, online customer surveys, and tweets. 

Web mining 

The discovery and analysis of useful patterns and information from thè World 
Wide Web or simply web is called web mining. Web mining is thè application of 
data mining technique to find interesting and potentially useful knowledge from 
web data. So web mining is thè application of data mining technique to extract 
knowledge from web data, including web documents, hyperlinks between 
documents, usage logs of web sites etc. 

Businesses might turn to Web mining to help them under stand customer 
behavior, evaluate thè effectiveness of a particular Web site, or quantify thè 
success of a marketing campaign. For instance, marketers use Google Trends and 
Google Insights for Search Services, which track thè popularity of various words 
and phrases used in Google search queries, to learn what people are interested in 
and what they are interested in buying. 
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Chapter 7 

Securing Information Systems 


As our society and thè world come to depend on computers and information 
systems more and more, firms must put better effort in making their systems less 
vulnerable and more reliable. The systems must also be more secure when 
processing transactions and maintaining data. 

System Vulnerability and Abuse 

As firms become more technologically oriented, they must become more aware 
of security and control issues surrounding their information systems and protect 
thè resources. 

Why Systems Are Vulnerable? 

Vulnerability is weakness or flaw in a computer System that can be exploited by 
a threat. Security threat is a possible danger that might exploit vulnerabilities in 
a computer System to breach security and thus cause possible harm. Information 
systems are vulnerable to technical, organizational, and environmental threats 
from internai and external sources. If managers at all levels don't make security 
and reliability their number one priority, then thè threats to an information 
System can easily become real. The figure below gives you an idea of some of thè 
threats to each component of a typical network. 


Client Communications Corporate 

(User) Lines Servers 



Unauthorized 

• Tapping 

• Hacking 

access 

• Sniffrng 

• Virusesand 

Errors 

• Message 

worms 


alteration 

• Theft and fraud 


• Theft and 

• Vandalismi 


fraud 

• Denial of 


• Radiation 

sennce attacks 


Corporate 

Systems 



bases 


Hardware 
Operating Systems 
Software 


• Theft of data 

• Copying data 

• Alteration of data 

• Hardware failure 

• Software failure 


Figure: Contemporary Security Challenges and Vulnerabilities 
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Businesses that partner with outside companies are more vulnerable. Partnering 
companies may not protect information as strictly. Employees of thè partnering 
firm may not view security as diligently as thè primary business. In today's 
business environment, it's not enough to protect hardware and software 
physically located within an organization. Mobile computing devices like 
smartphones, celi phones, netbooks, and laptops, add to thè vulnerability of 
information systems by creating new points of entry into information Systems. 
Internet Vulnerabilities 

If you connect to thè Internet with a cable modem or DSL you are much more 
vulnerable to hackers on your home PC than if you connect with a dial-up 
modem. That's because you are always connected, with a permanent IP address, 
which makes it easier for hackers to find you. The only smart thing to do is keep 
your software up-to-date and include firewall protection. 

Because distributed computing is used extensively in network systems, you have 
more points of entry, which can make attacking thè System easier. The more 
people you have using thè System, thè more potential for fraud and abuse of thè 
information maintained in that System. That's why you have to make it 
everybody's business to protect thè System. 

Malicious Software 

Malicious software, commonly known as malware, is any software that brings 
harm to a computer System. It can be used to disrupt computer operation, gather 
sensitive information, or gain access to private computer systems. Malware can 
be in thè form of worms, viruses, Trojans etc., which steal protected data, delete 
documents or add software not approved by a user. Malware takes partial to full 
control of our computer to do whatever thè malware creator wants. Most 
malware requires thè user to irritiate its operation. Some form of attacks includes 
attachments in e-mails, browsing a malicious website that installs software after 
thè user clicks ok on a pop-up. 

Worms 

This type of Malware uses network resources for spreading. This class was 
called worms because of its peculiar feature to creep from computer to computer 
using network, mail and other informational channels. Worms intrude our 
computer, calculate network addresses of other computers and send to these 
addresses its copies. Many worms that have been created are designed only to 
spread, and do not attempt to change thè systems they pass through. The biggest 
danger with a worm is its capability to replicate itself on your System, so it could 
send out hundreds or thousands of copies of itself, creating a huge devastating 
effect. 
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One example would be for a worm to send a copy of itself to everyone listed in 
your e-mail address book. Then, thè worm replicates and sends itself out to 
everyone listed in each of thè receiver's address book, and thè manifest continues 
on down thè line. Due to thè copying nature of a worm and its capability to 
travel across networks thè end result in most cases is that thè worm consumes 
too much System memory (or network bandwidth), causing web servers, 
network servers and individuai computers to stop responding. 

Father Christmas is an example of worm. It was distributed in 1987 and was 
designed for IBM networks. It was an electronic letter instructing recipient to 
save it and run it as a program that drew Christmas tree, printed "Merry 
Christmas!" It also checked address book, list of previously received email and 
sent copies to each address. The worm quickly overwhelmed thè IBM networks 
and forced thè networks and systems to be shut down 

Virus 

A computer virus is a program that inserts itself into one or more files and then 
performs some (possibly nuli) action. Computer virus works in two phases. The 
first phase, in which thè virus inserts itself into a file, is called thè insertion 
phase. The second phase, in which it performs some action, is called thè 
execution phase. Almost all viruses are attached to an executable, which means 
thè virus may exist on our computer but it actually cannot infect your computer 
unless we run or open thè malicious program. It is important to note that a virus 
cannot be spread without a human action, (such as running an infected program) 
to keep it going. Because a virus is spread by human action people will 
unknowingly continue thè spread of a computer virus by sharing infecting files 
or sending emails with viruses as attachments in thè email. 

The Brain (or Pakistani) virus, written for IBM PCs is an example of this category. 
It is thought to have been created in early 1986 but was first reported in thè 
United States in October 1987. It alters thè boot sectors of floppy disks, possibly 
corrupting files in thè process. It also spreads to any uninfected floppy disks 
inserted into thè System. 

Torjan Horse 

Trojan horses are thè files that claim to be something desirable but, in fact, are 
malicious code or logie. The Trojan Horse, at first glance will appear to be 
useful software but will actually do damage once installed or run on your 
computer. Receivers of a Trojan Horse are usually tricked into opening them 
because they appear to be receiving legitimate software or files from a legitimate 
source. When a Trojan is activated on your computer, thè results can vary. Some 
Trojans are designed to be more annoying than malicious like changing 
our desktop, adding silly active desktop icons etc. Sometimes they can cause 
serious damage by deleting files and destroying information on your System. 
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Trojans are also known to create a backdoor on your computer that gives 
malicious users access to your System, possibly allowing confidential or personal 
information to be compromised. Unlike viruses and worms, Trojans do not 
reproduce by infecting other files nor do they self-replicate. A program named 
"waterfalls.scr" serves as a simple example of a Trojan Horse. The author claims 
it is a free waterfall Screensaver. When run, it instead unloads hidden programs, 
commands, Scripts, or any number of commands without thè user's knowledge 
or consent. 

Spyware 

Spyware is any software installed on your PC that collects your information 
without your knowledge, and sends that information back to thè creator so they 
can use your personal information in some nefarious way. This could include 
keylogging to learn your passwords, watching your searching habits, changing 
out your browser home and search pages, adding obnoxious browser toolbars, or 
just stealing your passwords and credit card numbers. 

Since spyware is primarily meant to make money at your expense, it doesn't 
usually kill your PC — in fact, many people ha ve spyware running without even 
realizing it, but generally those that have one spyware application installed also 
have a dozen more. Once you've got that many pieces of software spying on you, 
your PC is going to become slow. 

Q fa Did you knoiv? What is backdoor? 

^3- A backdoor in a computer System is a method of bypassing 
normal authentication, securing unauthorized remote access to a computer, 
obtaining access to plain text, and so on, while attempting to remain undetected. 


Hackers and Computer Crime 

A hacker is someone who seeks and exploits weaknesses in a computer System or 
computer network. Hackers may be motivated by a multitude of reasons, such as 
profit, protest, challenge, enjoyment, or to evaluate those weaknesses to assist in 
removing them. Hacking practice can either be ethical or unethical. The activity 
where one breaks into thè System but do not violate its security and credentials is 
called Ethical Hacking. Ethical hackers aim to bring into thè administrator's notice 
and vulnerabilities in thè System thereby, improvising thè robustness and 
security. Thus term hacker does not mean criminal or bad guy. Actually, hackers 
are thè persons with flawless programming skills and hands-on knowledge on 
both computer hardware and software. 
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On thè other hand, there are people who can though break into systems, get 
access to secured accounts but their actions are usually unauthorized while they 
make a backdoor entry into your System. These people (often misinterpreted as 
hackers) are called as crackers. They try and crack passwords, security codes, etc 

using various hacking software's which are already available. Such software's 
are meant to break thè code using millions of trials programmed into it by other 
hackers. 

Spoofing and Sniffing 

These are two methods that hackers and criminals use to gain improper or illegal 
access to computer systems. Spoofing is becoming a common way to steal 
financial information through fake Web sites. The spoofed site is almost a mirror 
image of thè reai site and unless thè unsuspecting user examines thè spoof 
closely, he/she may inadvertently give out important personal and financial 
information. 

Using a sniffer program is a popular way to "grab" information as it passes over 
transmission lines regardless of whether they are hard-wired or wireless. It is 
almost impossible to detect and encryption is about thè only way to safeguard 
against it. 

Denial of Service Attacks 

As companies and organizations expand their business to Web sites, they are 
opening another point of vulnerability through denial of Service attacks. Using 
botnets to launch distributed denial of Service attacks is becoming all too 
common. The hackers seem to enjoy attacking thè most popular Web sites like 
Facebook and Twitter. 

Denial of Service attacks are at thè core of some of thè most serious forms of 
cyberwarfare being played out across thè world between countries and 
governments. From Russia to Iran to South Korea, government networks are 
being targeted through these kinds of attacks. The use of botnets makes it very 
difficult to determine thè origin of thè attacks and pinpoint responsibility. 

Computer Crime 

Computer crime is a growing national and international threat to thè continued 
development of e-business and e-commerce. When thè Internet was first created 
in thè late 1960s, thè designers intentionally built it to be open and easily 
accessible. Little did they know 40 years later, that structure would be thè very 
cause of so much crime and vandalism. Table below lists thè best known 
examples of computer crime. 


103 



TABLE 8-2 EXAMPLES OF COMPUTER CRIME 


COMPUTERS AS TARGETS OF CRIME 

Breaching thè confidentiality of protected computerized data 
Acce$sir>g a computer System without authority 
Knowingly accessing a protected computer to commit fraud 

Intentionally accessing a protected computer and causing damage, negligently or deliberately 

Knowingly transmitting a program, program code, or command that intentionally causes damage to a 
protected computer 

Threatening to cause damage to a protected computer 
COMPUTERS AS INSTRUMENTS OF CRIME 
Theft of trade secrets 

Unauthorized copying of software or copyrighted intellectual property, such as artkles, books, music, and 
video 

Schemes to defraud 

Using e-mail for threats or harassment 

Intentionally attempting to intercept electronic communication 

lllegally accessing stored electronic Communications, including e-mail and voice mail 

Transmitting or possessing child pomography using a computer 


It's very difficult for our society and our governments to keep up with thè rapid 
changes in thè types of computer crime being committed. Many laws have to be 
rewritten and many new laws must be implemented to accommodate thè 
changes. 

Identity Theft 

The fastest growing crime off or on thè Internet is identity theft. Even though 
identity theft is most likely to occur in an offline environment, once your 
personal information has been stolen it's easy to use it in an online environment. 

There are many precautions people can take to help prevent identity theft. One 
way is to scrutinize emails or phone calls that ask for your personal information 
or financial account information. No legitimate financial institution will ever 
send an email requesting you to supply your account information. That is thè 
number one indicator that thè email is a phishing email. You should ignore and 
delete thè email immediately. 


Click Fraud 

All those ads you see on Web sites cost thè sponsor money. Every time 
someone clicks on an ad, thè sponsor is charged a pay-per-click fee. The fee is 
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based on thè popularity of thè search words that generated thè ad. What if 
your company is paying for an ad with little or no resultant traffic to your Web 
site? That's what happens in thè case of click fraud. A person or a software 
program continually hits on thè ad, driving up thè advertising fees, without 
any intention of actually visiting thè site. 


Internai Threats: Employees 

It is surprising to learn that most computer crime against companies is 
committed by current or former employees. They know thè System best, are 
entrusted with huge amounts of data, and have thè easiest access. Managers and 
executives need to be aware of potential internai threats to their systems and put 
special measures in place to safeguard systems and data. They also need to 
impress upon all employees how important security is throughout thè System 
right down to thè last person. 


Password theft is thè easiest way for hackers to gain access to a System. No, they 
don't come into your office at night and look at thè piece of paper in your desk 
drawer that has your password written on it. They generally use specially 
written software programs that can build various passwords to see if any of them 
will work. That's why you should use odd combinations of letters and numbers 
not easily associated with your name to create your password. The longer thè 
password, thè harder it is to replicate. The same password should not be used for 
more than one access point. Using multiple passwords limits thè damage done if 
a hacker does manage to obtain a single password. 

Safeguarding individuai passwords from social engineering maliciousness is thè 
responsibility of everyone in thè organization. An effective way of limiting access 
to data is to establish computer-generated logs that show every employee who 
logged on, what they did, what part of thè System they accessed, and whether 
any data were used or updated. Logs are easily created by System software 
programs and should be periodically reviewed by thè information technology 
staff and department managers. If nothing else, it gives them an idea of what 
their employees are doing. 

Business Value of Security and Control 

Transactions worth billions and trillions of dollars are carried out on networks 
every day. Think of thè impact if thè networks experience downtime for even a 
few minutes. It may create serious harm to business reputation of thè 
organization. 
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If a business doesn't adequately protect its systems for any other reason, it 
should just to avoid expensive and time-consuming legai action. The national 
retailer T.J. Maxx was forced to spend about $200 million in court case and 
damage costs after it experienced a serious security breach in 2008. 


Legai and Regulatory Requirements for Electronic Records 
Management 

Because so much of our personal and financial information is now maintained 
electronically, thè government needs to pass laws mandating how thè data will 
be protected from unauthorized or illegal misuse. Govt. of Nepal has already 
passed a cyber law outlining thè requirements for electronic records 
management and is in process of modifying thè law and creating new laws. 

All of these laws are in response to computer crimes and abuses that businesses 
or individuai have committed or experienced. 

Electronic Evidence and Computer Forensics 

Several things are happening in thè corporate worlds that are changing thè 
requirements for how companies handle their electronic documents: 

- Companies are communicating more and more with email and other 
forms of electronic transmissions, and 

- Courts are allowing all forms of communication to be held as evidence. 
Therefore businesses must develop methods of capturing, storing, and 
presenting any and all electronic Communications including email, instant 
messaging, and e-commerce transactions. 

Computer forensics is thè application of investigation and analysis techniques to 
gather and preserve evidence from a particular computing device in a way that is 
suitable for presentation in a court of law. It can be used in thè detection and 
prevention of crime and in any dispute where evidence is stored digitally. 
Computer forensics is a growing field because of thè increasing digitization of 
documents and Communications. Many people believe that just because they 
delete a file from a computer file directory that it's no longer available or 
recoverable. That's a false belief. Data remains on hard drives in magnetic form 
long after it's apparently been deleted. People trained in computer forensics are 
able to uncover ambient data and other forms of electronic evidence that can be 
used in courts of law. Businesses and employees must increase their awareness 
of thè necessity for keeping good records. 

Establishing a Framework for Security and Control 

To prevent security related problems one of thè best ways is to institute Controls 
into our information System through methods, policies, and procedures. 
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Information Systems Controls 

These are just a few examples to get you to think about thè fact that thè company 
designs thè security into thè building from thè beginning. It doesn't wait until 
everything is built. You should do thè same thing with an information System. 
It's no different from any other System that requires planning and well-thought- 
out policies and procedures before construction begins. 

The two types of information System Controls are: 

• General Controls: Software, physical hardware, computer operations, 
data security, implementation process, and administrative. Table given 
below describes each of these. 

• Application Controls: Input, processing, and output. 


TABLE 8.4 GENERAL CONTROLS 

TYPE OF GENERAL CONTROL DESCRIPTION 


Software Controls 

Monitor thè use of System software and prevent unauthorized access of software program* System 
software, and computer program?. 

Hardware Controls 

Ensure that computer hardware is physkafly secure, and check for eqmpment malfunction. Orgamzations 
that are criticali 1 / dependent on their computer? aiso must male provisions for backup or continued 
operation to maintain Constant Service. 

Computer operations controfe 

Oversee thè work of thè computer department to ensure that programmed procedures are consrstentty 
and correctfy applied to thè Storage and processing of data. They include Controls over thè setup of 
computer processing jobs and backup and recovery procedures for processing that ends abnormally. 

Data security contrafe 

Ensure that valuabie business data files on either disk or tape are not subject to unauthorized access, 
change, or destruction whife they are in use or m Storage. 

Implementation Controls 

Audit thè systems development process at vanous pomts to enswe that thè process is properly controfled 
and managed. 

Administrative contrafe 

Formalize standards, rules, procedure* and control disciplines to ensure that thè organizatmn's generai 
and application Controls are property executed and enforced. 


Risk Assessment 

Companies and government systems constantly use risk assessment to 
determine weak links in their physical building security. You can use thè same 
methodology to assess thè risk in your information System. Use risk assessment 
to set up cost comparisons for developing and maintaining security against thè 
loss potential. It's done all thè time in other systems, so use it for your 
information System as well. 
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Security Policy 

Because of thè increasing liability for security breaches, many companies are now 
establishing a chief security officer position to help ensure thè firm maximizes 
thè protection of information resources. Some tools available to thè CSO are: 

• Security policy: Principle document that determines security goals and 
how they will be achieved. 

• Acceptable use policy: Outlines acceptable and unacceptable uses of 
hardware and telecommunications equipment. 

• Identity management System: Manages access to each part of thè 
information System. 

Identity management is one of thè most important principles of a strong, viable 
security policy. It includes: 

• Business processes and software tools for identifying valid System users. 

• Controlling access to System resources. 

• Policies for identifying and authorizing different categories of System 
users. 

• Specifying what systems or portions of systems each user is allowed to 
access. 

• Processes and technologies for authenticating users and protecting their 
identities 


Disaster Recovery Planning and Business Continuity 
Planning 

Floods, fires, hurricanes, even tsunamis, happen without a moment's notice. 
Perhaps thè most important element of a successful System is a disaster recovery 
pian. Those firms that had completed business continuity planning were able to 
carry on business, while those that hadn't, spent days and weeks recovering 
from thè terrorist attacks. It's important that managers and employees work with 
information System technicians to develop these plans. 

The Rote of Auditing 

Companies audit their financial data using outside firms to make sure there 
aren't any discrepancies in their accounting processes. Perhaps they audit their 
supply systems on a periodic basis to make sure everything is on thè up-and-up. 
They should also audit their information systems. After all, information is as an 
important resource as any other in thè organization. MIS audits verify that thè 
System was developed according to specifications, that thè input, processing, and 
output systems are operating according to requirements, and that thè data is 
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protected against theft, abuse, and misuse. In essence, an MIS audit checks all thè 
Controls we've discussed in this chapter. 
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Management Information 
System 

Ch-8: Building Information System 




Opening Case: CIMB Group Redesign for 

Account Opening Process 

• Headquarter of CIMB Group is locateci in Kuala Lumpur, 
Malaysia and is second largest financial Services provider and 
thè third largest company on thè Malaysian Stock Exchange. 

• It provides Services on full range of financial products and 
Services along with consumer banking, corporate and 
investment banking, insurance and asset management. 

• Its banking network is all over Southeast Asia with over 1100 
branches. 

• A Business Process Management System ARIS was introduced 
in 2008 to identify 25 different areas for improving technology, 
people and process and to overcome gaps and inefficiencies in 
existing process. 

• New account opening process was introduced with thè help of 
this technology. 


Opening Case: CIMB Group Redesign for 

Account Opening Process 

• The drawbacks like filling forms with all details of opening 
account with old process was recovered with thè help of 
Government Multipurpose Card also known as MyKad which 
is provided to every Malaysian Citizen which carry all thè data 
that a bank needs to open an account. 

• This is world first smart identity card, incorporating a 
microchip with different types of information like nanne, 
address, gender etc. 

• It reduced thè number of data entry screens and consumes 
less time which attracted customers. 

• All thè data are retrieved from MyKad card and data are 
entered using a single screen. 

• It made thè interaction between customers and bank more 
effe et i ve. 


Opening Case: CIMB Group Redesign for 

Account Opening Process 

• The company got benefitted mainly by increasing productivity 
and increased cost from 8 to 9 percent annually. 

• This System also gave idea on organizing problems with 
existing information System, assessing people's information 
requirements, selecting appropriate technology and 
redesigning business processes and jobs. 


System as Planned 
Organizational Change 

There is change in organizational behavior regarding different 
aspects when there is an introduction of new Information 
System. These changes could be thè change in hardware and 
software along with thè working pattern in an organization. 

System Development and Organizational Change 

• When IT is involved in an organization, it makes changes in 
some aspects like automation, rationalization, business 
process redesign and paradigm shifts. 

• When IT enables automation in change in organizational 
behavior, thè employee perform their tasks more efficiently 
and effectively. 

• Rationalization further support automation to overcome from 
thè things it cannot explain. 


System as Planned 
Organizational Change 

• It is used for making a series of continuous quality 
improvements in products, Services and operations such as 

Total Quality Management and Six Sigma. 

• TQM makes achieving quality and end in itself and thè 
responsibility of all people and functions within an 
organization. 

• Six Sigma is a specific measure of quality, representing 3.4 
defects per million opportunities. 

• In Business Process Redesign, business processes are 
analyzed, simplified and redesigned. It reorganizes workflows, 
combining steps to cut waste and eliminate repetitive, paper 
intensive tasks. 

• It helps to reduce many complexities in an organization. 


System as Planned 
Organizational Change 

• Paradigm Shift involves rethinking thè nature of thè business 
and thè nature of an organization. 

• Though its success rate is very low due to hardly acceptance in 
extensive change, it is used because thè rewards are very high 
as these strategies can lead to achieve results stunning & high 
order of magnitude in thè return of investment 

Business Process Redesign 

• Many organization today are trying to improve their business 
processes by adopting Information Technology for incrementai 
process changes. 

• Business Process Management provides a variety of tools and 
methodologies to analyze existing process, design new 
process and optimize those processes. 


System as Planned 
Organizational Change 

• The requirement for continuous change in business process 

need have to go through following steps: 

1. Identify process for change: When systems are used to 
strengthen thè wrong business model or business 
processes, thè business can become more efficient at doing 
what should not have to be done. Managers need to 
determine what business processes are thè most important 
and how improving these processes will help business 
performance. 

2. Analyze existing processes: Existing business processes 
should be modeled and documented, noting inputs, 
outputs, resources, and thè sequence of activities. 

3. Design thè new Process: Once thè existing process is 
mapped and measured in terms of time and cost, thè 
process is designed as a new one. 


System as Planned 
Organizational Change 

The new process design needs to be justified by showing 
how much it reduce time and cost or enhance customer 
Service and value. 

4. Implement thè new Process: Once thè new process has 
been thoroughly modeled and analyzed, it must be 
translated into a new set of procedure and work rules. The 
new process and supporting systems are rolled out into 
thè business organization. Employees working with new 
process may recommended improvements. 

5. Continuous Measurement: Once a process has been 
implemented and optimized, it needs to be continuously 
measured because processes may lead employee to fall 
back on old methods or a company may have to face 
unwanted changes. 


System as Planned 

Organizational Change 

• When properly implemented, business process redesign 
produces dramatic gains in productivity and efficiency and 
may even change thè way thè business is run. 

• These kind of change is neither simple nor intuitive and 
companies committed to extensive process improvement 
need a good change management strategy. 


OverView of System 
Development 

• New Information Systems are an outgrowth of a process of 
organizational problem solving. 

• The problem may be one in which managers and employees 
realize that thè organization is not performing as well as 
expected or that thè organization should take advantage of 
new opportunities to perform more successfully 

• The activities that go into producing an information System 
solution to an organizational problem or opportunity are 
called System Development. These activities consist of System 
analysis, System design, programming & testing, conversion 
and production an maintenance. 

• It is done in sequential order but sometime processes need to 
be performed simultaneously. 


Interactive Sessioni Can Business Process 

Management make a Difference 

• AmerisourceBergen is one of thè largest pharmaceutical 
Service company and a member of thè Fortune 25. 

• It has a large business which has complicated relationship with 
manufacturers, pharmacies and hospitals. 

• Frequently changing business conditions cause contract prices 
to fluctuate which made trouble to analyze data of contract 
and price detail associated with each of these relationships. 

• To reduce thè complexity, it chose Metastorm BPM software 
in which there were presence of tools for analyzing, managing 
and redesigning business processes. 

• Metastorm has an engine for deploying redesigned processes 
along with capabilities for integrating thè processes it 
manages with external System. 


Interactive Sessioni Can Business Process 

Management make a Difference 

• With thè help of this System creation of rich graphical models 
of business processes as well as new user interface and 
business was possible. 

• It used thè application for thè first time on online collaborative 
contract and chargeback process which was responsible for 
$10 billion. 

• Metasource BPM makes it possible for all contract changes to 
be recorded into thè System and validate against internai 
business rules and also enables AmerisourceBergen to link 
with its trading partners for collaborative BPM. 

• The BPM project was successful and resulted in lower 
headcounts, fewer disputes, more accurate pricing 
information and a high return on investment. 


Interactive Sessioni Can Business Process 

Management make a Difference 

• AmerisourceBergen use Metastorm BPM to create six new 
specialized process for managing and automating high 
volume, highly specialized supplier credits which interface 
with its SAP enterprise System. 

• It was adopted by thè company as it has ability to receive, 
track, reconcile and expedite all credit variances. 

• AmerisourceBergen has automated nearly 300 processes 
benefiting from more efficient and accurate record tracking, 
faster turnaround time, greater management into key 
performance indicators and an online audit trail of all activities 

• The company also won a Global Excellence in BPM and 
Workflow award in 2009. 


Interactive Sessioni Can Business Process 

Management make a Difference 

• Diebold. Ine. is another company in integrateci self Service 
delivery and security System and Services with 17,000 
associates across 90 countries. 

• This company makes, installs and Services ATMs, vaults, 
currency-processing systems and other security systems used 
in financial, retail and Government market. 

• This company selected Progress Savvion's BusinessManager 
BPM for using business process management to understand 
and improve its order fulfillment process. 

• It was provided a web based application for thè purpose 
which gives managers reai time visibility to monitor, analyze, 
control and improve thè execution of those processes and can 
integrate these processes with existing operational systems. 


Interactive Sessioni Can Business Process 

Management make a Difference 

• Diehold managers are able to track orders in reai time at any 
step in thè process and also predict future performance based 
on past data which helped them to forecast where orders 
ought to be and compare that with where thè System says thè 
orders actually are. 

• Also thè detection of production of item can be done and 
where specific item are located can be found out. 

• The System was also used for issue resolution which 
aggregates input from various sources such as worker in field 
and in factories 


Interactive Sessioni Can Business Process 

Management make a Difference 

• Answer thè Case Study Question 

• Refer page no. 504 

• Be precise with your answers. 

• Also look at MIS in Action to be familiar with Reai Time 
Questionnaire. 


System Analysis 

• System analysis is thè analysis of a problem that a firm tries to 
solve with an information System which consist of defining thè 
problem, identifies thè causes, specifying thè solution and 
identifying thè information requirements that must be met by 
a System solution. 

• System analysis is done by System Analyst who examines 
documents, work papers and procedures, observing System 
operations and interviewing key users of thè System 

• It consist of feasibility study to determine whether that 
solution is feasible or achievable from a financial, technical 
and organizational standpoint. 

• The System analysis process identifies several alternative 
Solutions that thè organization can pursue and assess thè 
feasibility of each. 


System Design 


• When thè analysis part is over, we move to thè design part 
which shows how thè System will fulfill this objective. It is thè 
overall pian or model for that System. 

• It consist or System specifications that will deliver that 
functions identified during System analysis which consist of all 
of thè managerial, organizational and technological 
components of thè System solution. 

• Working on design increases users' understanding and 
acceptance of thè System so that they have their sufficient 
control over thè design process to ensure that thè System 
reflects their business priorities and information need not thè 
biases of thè technical staff. 


Completing thè SDP 

• After analysis and design, all thè components picked up are 
translated into fully operational information System which 
includes following steps: 

• Programming: it is a process where System specifications 
that were prepared during thè design stage are translated 
into software program code. In an organization, software 
are generally purchased from vendor or they outsource. 

• Testing: After thè completion of thè application, it must be 
tested to check its functionality. During test data must be 
carefully prepared, result are reviewed, and correction are 
made in a System. For thè preciseness, testing is also done 
in three parts viz. unit testing, System testing and 
acceptance testing. 


Completing thè SDP 

Sometimes conversion is needed to change thè old process 
into new one for which different strategies are used viz. 

parallel strategy, direct cutover strategy, pilot study 
strategy and thè phased approach strategy. 

• Production and Maintenance: After thè new System is 
installed and conversion is completed, thè System is said to 
be in production. During thè stage, thè System will be 
reviewed by both users and technical specialists to 
determine how well it has met its originai objectives and to 
decide whether any revisions or modifications are in order 

After thè System has been fine tuned, it must be 
maintained while it is in production to correct errors, meet 
requirement or improve processing efficiency. 


Completing thè SDP 

Changes in hardware, software, documentation or 
procedures to a production System to correct errors, meet 
new requirements or improve processing efficiency are 
termed as maintenance. 


Modeling & Designing Systems 

When we need to design or develop a System we follow 
different approaches and methodologies. Those approaches are 
generally picked up as either structured or object oriented 
programming language. 

Structured Approach: 

• Structured refers to thè technique that it works step by step, 
with each step building on thè previous one. 

• Structured methodologies are top-down, programming from 
thè highest, most abstract level to thè lowest level of detail. 

• These are process oriented, focusing primarily on modeling 
thè processes or action that capture, store, manipulate and 
distribute data as thè data flow through a System 


Modeling & Designing Systems 

• A separate programming procedure must be written every 
time if someone wants to take an action on a particular piece 
of data 

• To represent a systerrTs component processes an thè flow of 
data between them is done by using a tool called Data Flow 
Diagram 

• The data flow diagram offers a logicai graphic model of 
information flow, partitioning a System into modules that 
show manageable levels of details specifying processes and 
transformation that occur within each module and thè 
interface that exist between them. 

• Another tool for structured analysis is a Data Dictionary which 
contains information about individuai piece of data and data 
grouping within a System. 


Modeling & Designing Systems 

• Process Specifications describe thè transformation occurring 
within thè lowest level of thè data flow diagram. 

• Another tool used is Structure Chart which is a top down chart 
showing each level of design, its relationship to other levels 
and its place in thè overall design structure. 

Object Oriented Development: 

• To overcome thè separation of data and processes, object 
oriented approach is considered. 

• Object oriented development uses thè object as a basic unit of 
systems analysis and design which combines data and thè 
specific process that operate on those data. 

• Instead of passing data to a procedure, programs send a 
message for an object to perform an operation. 


Modeling & Designing Systems 

• Because processing logie resides within objects rather that in 
separate software program, objects must collaborate with 
each other to make thè System work. 

• Object oriented modeling is based on thè concepts of class 
and inheritance. 

• Objects belonging to a certain class or generai categories of 
similar objects have thè features of that class. 

• The information System is implemented by translating thè 
design into program code, reusing classes that are already 
available in a library of reusable software objects and adding 
new ones. 

• Since objects are reusable, it could potentially reduce thè time 
and cost of writing software . 


Alternative System Building 
Approaches 

System differ in terms of their size and technological complexity 

and in term of thè organization it is meant to be solved using 

different approaches. 

Traditional System Life Cycle 

• The one of thè oldest method of building a System is a phased 
approach. In this process, System Development Specialists 
divide thè System building stages. 

• Technical Specialists are responsible for much of thè System 
analysis, design and implementation work where end users 
are limited to providing information, requirements and 
reviewing thè technical staff s work. 

• This approach works on requirement analysis, predefined 
specifications and tight control over System building approach. 


Alternative System Building 
Approaches 

• It follow waterfall approach in which next stage can't be 
touched before completing thè existing one. 

• In this approach steps can be retraced and specifications can 
be revised. 

Prototyping 

• Prototyping consists of building an experimental System 
rapidly and inexpensively for end users to evaluate. 

• Once this model is operational, it will further refined until it 
conforms precisely to users' requirements. Once thè design is 
finalized, thè prototype can be converted into final System. 

• It can also be called iterative process because thè steps 
required to build a System can be repeated over an over again. 


Alternative System Building 
Approaches 

Steps in Prototyping : 

• Stepl: identify thè users' basic requirements 

• Step2: develop an initial prototype 

• Step3: use thè prototype 

• Step4: revise and enhance thè prototype 

End-User Development: 

• Some types of information System can be developed by end 
users with little or no formai assistance from technical 
specialists and this phenomenon is called end-user 
development. 

• Fourth generation programming languages enables end users 
to create reports or develop software application. 


Alternative System Building 
Approaches 

• The fourth generation software can be procedural or non 
procedural programming languages. 

• Fourth generation software contain seven categories: PC 
Software tools, Query Languages, report generations, graphics 
languages, application generations, application software 
packages and very high level programming languages. 

• End users are most likely to work with PC software tools and 
query languages. 

• End users develop systems can be completed more rapidly. 

• The tools developed by end-users are not conventional as it 
cannot easily handle thè processing of large number of 
transactions or application with extensive logie and updating 
requirements. 


Alternative System Building 
Approaches 

Application Software Packages: 

• Most of thè applications are build on thè basis of package 
System which includes common applications for many 
organizations such as payroll, accounts receivable, generai 
ledger or inventory control which are used for long period of 
time and fulfill thè requirements. 

• In such cases, a company purchase prewritten, predesigned, 
pretested software programs from thè package to minimize 
time 

• In case of unique requirements that thè package cannot fulfill 
they have thè capability of customization which allows a 
software package to be modified to meet an organization's 
requirement without destroying thè integrity. 


Alternative System Building 
Approaches 

• Such packages are evaluated on thè basis of package, 
flexibility, user friendliness, software and hardware resources, 
database requirements, installation and maintenance efforts, 
vendor quality, documentation and cost which is asked as 
Requestfor Proposai submitted to software vendors. 

• In thè case when customization could not be taken place, thè 
organization have to adopt thè package System and change 
thè working procedures. 

Outsourcing: 

• In case, if a firm does not want to use its internai resources to 
build or operate information systems, it can outsource thè 
work to an external organization that specializes in providing 
these kind of Services. 


Alternative System Building 
Approaches 

• In another case of outsourcing, a company could hire another 
company, either domestic or of another company, to design 
and create thè software for its System. 

• In case of domestic outsourcing for supply chain management, 
a company require around 50 number of employees with 
specific expertise and who might need extensive training 
which is considered as expensive decision rather it outsource a 
company who can fulfill all thè requirement in low cost with 
better efficiency. 

• In contrary, thè Internet and low cost communication 
technology have drastically reduced thè expense and difficulty 
of coordinating thè work of global teams in faraway locations 
& get chance of utilizing global expertise. 


Alternative System Building 
Approaches 

• Any company that outsources its applications must thoroughly 
understand thè project, including its requirements, methods 
of implementation, anticipated benefits, cost components and 
metrics of measuring performance. 

• The vendors should fulfill thè contractual obligations & 
thoroughly understands thè business along with thè company 
should need to allocate resources for documenting 
requirements, sending out RFPs, travel expenses, negotiating 
contracts and travel expenses so that thè project should be 
delivered in certain time period. 

• Outsourcing enables a company to reduce its hidden cost 
along with thè complexity of dealing with Human Resources 
issues of hiring and firing employees. 


Alternative System Building 

Approaches 

• This is also useful in analyzing best case and worst case 
scenario for thè total cost of an offshore outsourcing project. 

• Best cases can be picked up for thè estimation of total cost in 
low level and thè worst cases can be picked up to eliminate 
thè highest estimation of these cost. 


Interactive Sessioni Zimbra Zooms ahead 

with OneView 

• Zimbra is a software company whose flagship product is 
Zimbra Collaboration Suite (ZCS) which is an open source 
messaging and communication software package that relies 
heavily on Ajax to provide a variety of business functions. 

• It was purchased by Yahoo in 2007 but now have its own 50 
million users to it provide Services like mailbox, contact lists, 
shared calendar, instant messaging, hosted documents, search 
and VolP which can be accessed by any supportive mobile. 

• Negative feedback were taken by thè company which lead thè 
company and thè package to be very successful. 

• It offers two type of packages which includes free (as trial) and 
paid versions which can be downloaded from its web site 
which visiting rate is 200000 visitors per week. 


Interactive Sessioni Zimbra Zooms ahead 

with OneView 

• The free version has some basic features being used by users 
who are persuaded to switch to thè paid version. 

• Salespersons identify thè users who use thè application most 
likely to upgrade to thè commercial version. 

• Those users are identified and contacted by email address and 
telephone numbers. 

• Zimbra uses its website to track its visitors ' activity and tie it 
to sales lead information in its Customer Relationship 
Management System (salesforce.com). 

• At initial phase, Zimbra used marketing automation software 
from Eloqua which had a large number of unfavorable features 
but was too complicated for both marketing and sales staff to 
use. 


Interactive Sessioni Zimbra Zooms ahead 

with OneView 

• Its was unsuccessful because of various reasons such as 
salespersons need had to code conditional logie for any data 
field containing data they wanted to collect which consumes 
lots of time. Also it only worked with IE while 2/3 rd of thè 
Zimbra's Staffs used Mozilla firefox. The application was 
expensive as well 

• Since Zimbra could not afford any of its employee to be 
administrated use Eloqua's features, it planned to switch thè 
System. 

• For this it examined many software produets from which it 
choose OneView from LoopFuse which specialize in sales and 
marketing automation. 

• It was found less time consuming in every aspect. 


Interactive Sessioni Zimbra Zooms ahead 

with OneView 

• The core functions of OneView include Web Site visitor 
tracking, automated marketing program communication, 
customer activity alerts and CRM integration. 

• It was also convenient pricing options included unlimited 
seating and pay per use options. 

• Other benefits of OneView include easy integration with 
salesforce..corri. Zimbra's preferred CRM solution, simplified 
reporting processes and thè ability to manage large number of 
leads was solved along with browser compatibility. 

• OneView reduced thè amount ottime Zimbra spent using and 
maintaining its marketing System by 50 percent and jump in its 
dose rate on qualified sales leads from 10 to 15 percent. 


Interactive Sessioni Zimbra Zooms ahead 

with OneView 


• Answer thè Case Study Question 

• Refer page no. 521 

• Be precise with your answers. 

• Also look at MIS in Action to be familiar with Reai Time 
Questionnaire. 


Application Development for 
Digital Firm 

• In digitai environment, organizations are able to add, change 
and retire their technology capabilities very rapidly to respond 
to new opportunities that provide very fast solution. 

• With thè help of software packages and external Service 
providers, business are relying more heavily on fast cycle 
techniques. 

• These techniques could be considered as rapid application 
development, joint application design, agile development and 
reusable standardized software components. 

• These features can be assembled together to make a 
complete set of Services as required. 


Rapici Application Development 

• The term Rapid Application Development (RAD) is used to 
describe thè process of creating workable systems in a very 
short period of time. 

• These application are generally developed with thè help of 
object oriented software tools, reusable software, prototyping 
and fourth generation software. 

• Using any method along with thè visual programming, it can 
be performed by dose teamwork among thè end users and 
thè technical specialists where process does not have to be 
sequential and key part of thè development can occur 
simultaneously. 

• An application which comes from an interactive session 
among end users and thè Information System specialists for 
System development is termed as Joint Application Design 
(JAD). 


Rapici Application Development 


• Likewise, Agile Development focuses on rapid delivery of thè 
working software by breaking a large project into a series of 
small subprojects that are completed in short period of time 
using iteration and continuous feedback. 

• Improvement or addition of new functionality takes place 
within thè next iteration as developers clarify requirements. 

• Agile methods emphasize face to face communication over 
written documents, encouraging people to collaborate and 
make decisions quickly and effectively. 


Component Based 
Development & Web Services 

• This type of development is based on thè concept of object 
oriented programming where object are used. 

• The components are said to be thè group of objects 
assembled together to perform some kind of task such as a 
graphical user interface or online ordering System. 

• The approach used in software development is known as 
component based development and it enables a System to be 
build by assembling and integrating existing software 
components. 

• This technology is generally used for e-commerce. 

• In web Services, thè combination of markup language and 
other open protocols and standards enable one application to 
communicate with other without customization. 


Component Based 
Development & Web Services 

• As web Services follow universal set of standards being less 
expensive and less difficult to weave together, it is generally 
preferred. 

• It can complete some complex transactions such as checking 
credit, procurement or ordering products being independent 
from operating System, programming language or client 
device. 


Hands on MIS 


Improving Decision Making: Using Database Software to design 
a customer System for auto sales 

• Refer to hook, Page no. 525 

Achieving Operational Excellence: Redesigning Business 
Processes for Web Procurement 

• Refer to book, Page no. 526 


